ogram 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x381000, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB]}) 13:57:29 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x97, 0x205, 0x105, 0x8001, r2}, 0x10) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 587.748957] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 587.748961] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 587.748967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 587.758028] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:29 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x9b4c]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = dup3(r0, r0, 0x80000) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x8, 0x363001) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="440f20c0350a000000440f22c0360f01c20f20d835080000000f22d8f26db8008000000f23c00f21f83502000c000f23f8c4e27d1909660fc7b005000000f2ae66baf80cb87e30778aef66bafc0c66b89c0066eff30f1efe", 0x58}], 0x1, 0x8, &(0x7f0000000180)=[@cstype3={0x5, 0xc}, @dstype3={0x7, 0xf}], 0x2) 13:57:29 executing program 4 (fault-call:5 fault-nth:6): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 588.120447] FAULT_INJECTION: forcing a failure. [ 588.120447] name failslab, interval 1, probability 0, space 0, times 0 [ 588.153947] CPU: 1 PID: 23602 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 588.161091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:57:29 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="106c7823b619820026960d768c1234e00fbbe06c27f93facd83173492cbb57aa098dbb79a271ac13cbb6834f83116e65d3842e2c5577d85f640bfbd7695efd80d457e4bf028b0fc912f7268a78dabc1ee6bd0ac9ef863d94d1824c"]}) [ 588.161098] Call Trace: [ 588.161134] dump_stack+0x138/0x19c [ 588.161153] should_fail.cold+0x10f/0x159 [ 588.161174] should_failslab+0xdb/0x130 [ 588.180858] __kmalloc+0x2f0/0x7a0 [ 588.188356] ? __alloc_workqueue_key+0x114/0xec0 [ 588.193103] __alloc_workqueue_key+0x114/0xec0 [ 588.193115] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 588.193145] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 588.193164] hci_register_dev+0x1a7/0x810 [ 588.193173] ? hci_init_sysfs+0x7c/0xa0 [ 588.202483] __vhci_create_device+0x2a6/0x560 13:57:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) [ 588.202495] vhci_write+0x2a1/0x437 [ 588.202507] __vfs_write+0x4a7/0x6b0 [ 588.202517] ? kernel_read+0x120/0x120 [ 588.202535] ? rw_verify_area+0xea/0x2b0 [ 588.202544] vfs_write+0x198/0x500 [ 588.202556] SyS_write+0xfd/0x230 [ 588.202566] ? SyS_read+0x230/0x230 [ 588.202575] ? do_syscall_64+0x53/0x640 [ 588.202583] ? SyS_read+0x230/0x230 [ 588.202594] do_syscall_64+0x1e8/0x640 [ 588.211725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.220162] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 588.220170] RIP: 0033:0x459829 [ 588.220174] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.220183] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 588.220187] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 588.220191] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 588.220197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 588.227529] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 588.233150] Bluetooth: Can't register HCI device 13:57:30 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:30 executing program 4 (fault-call:5 fault-nth:7): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:30 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r1, r2, 0x6, 0x39, &(0x7f0000000180)="3425a6ef4c0e5e464a967fca1246f2c35b5a9af26ddf268851fb510753220570dbacedeff15c5d36ad62b72f57d0e27bfba1b47f32a23416f1", 0xfffffffffffffffd, 0x4, 0x5a0e, 0x6, 0x9, 0x2, 0x8, 'syz0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 13:57:30 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x97, 0x205, 0x105, 0x8001, r2}, 0x10) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:30 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1a, 0x0, "2ca8db7251fdbeb7eff1c4619322c9de887b44a30b678c2ae8620840edc5e95bf9713ea0bf7c52b093109a1ef188638b1202de52503948a26f2c7877c4b79fb5", "d0b72c6714b17d0f3c203b8e1bc696d055c50af1f76153d9e615b68f67ae50453d00636405972ff061892f62ffce5252c776a18bb1bba741f2f60bfaec271d97", "e70ab6db8c46ad6108d20e22ed0960177b5fd4dd1209e8f2e20299ac78ab111b", [0xffffffff, 0x8001]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x28003) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:30 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'\x00', {0x2, 0x4e21, @remote}}) socket$inet6_udp(0xa, 0x2, 0x0) 13:57:30 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mkdir(0x0, 0x40) pipe2(0x0, 0x2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x6b}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000006c0)=""/42) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa1c9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000400)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='bpf\x00', 0x0, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00') mknod$loop(0x0, 0x0, 0xffffffffffffffff) read$eventfd(r1, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x4, &(0x7f00000000c0)) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000021000)='./bus\x00', 0x100000000, 0xc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) mlock2(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000009000/0x2000)=nil, 0x2000, 0xb) geteuid() 13:57:30 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, "c3751fc8601d31bc86528214a35752bc6105086e0b64e6cbf39e08f43352f37774d5de2e2fee30fde2047bb879db14869521c7eb389a3de6f67caed6747fd755633bf4e1b97ed34cde005f17d3b7e660b84789174852c815bea076f756856871fd3ef32b9262c13e15dda9f9b518a7bc2a24da0df40b68479f99c753e8999334a6d30f252ded049dad3b0df897798f2b4072d0dd26d6970a5090d7871446d522a288bce7b1c864cce92d1d27e9b1c545b001758f8dcfce5eadd44d6575fed0588c8cea8df9859357241e4db054b37ee9978f96290c9d2bd86e94289ccffe"}, 0xffffff65) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 588.635480] FAULT_INJECTION: forcing a failure. [ 588.635480] name failslab, interval 1, probability 0, space 0, times 0 [ 588.674634] CPU: 1 PID: 23625 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 588.681880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.691233] Call Trace: [ 588.691253] dump_stack+0x138/0x19c [ 588.691270] should_fail.cold+0x10f/0x159 [ 588.691285] should_failslab+0xdb/0x130 [ 588.691297] kmem_cache_alloc_trace+0x2e9/0x790 [ 588.691305] ? vsnprintf+0x290/0x1560 [ 588.691316] ? __alloc_workqueue_key+0x114/0xec0 [ 588.691328] __alloc_workqueue_key+0x15f/0xec0 [ 588.691335] ? pointer+0xb10/0xb10 [ 588.691350] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 588.705634] ? scnprintf+0x100/0x100 [ 588.705646] ? ida_remove+0x230/0x230 [ 588.705660] hci_register_dev+0x1a7/0x810 [ 588.743679] ? hci_init_sysfs+0x7c/0xa0 [ 588.747674] __vhci_create_device+0x2a6/0x560 [ 588.752198] vhci_write+0x2a1/0x437 [ 588.755823] __vfs_write+0x4a7/0x6b0 [ 588.759535] ? kernel_read+0x120/0x120 [ 588.763433] ? rw_verify_area+0xea/0x2b0 [ 588.767490] vfs_write+0x198/0x500 [ 588.771029] SyS_write+0xfd/0x230 [ 588.774480] ? SyS_read+0x230/0x230 [ 588.778103] ? do_syscall_64+0x53/0x640 [ 588.782084] ? SyS_read+0x230/0x230 [ 588.785702] do_syscall_64+0x1e8/0x640 [ 588.789598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.794442] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 588.799622] RIP: 0033:0x459829 [ 588.802804] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.810524] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 588.817788] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 13:57:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x11100, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="10fc11a51bd1dce0a49b2be7637a6e8e227bfabecdc338baf1bc16c08a4c3daf3dac6abb3affb888b4cdccb9ed7865ee2f05a9ca11ef74f6f2f4bec51bc46e3b9f621f687de47b0fe68c66f41d63aa73e4793677d63c316816af61bd5ea252523537a236f45e778aaa029bdc515a67823b3d009b387be06d91a6a281119ab04f467f3f93661e1cba2da0a50ef57f8ebd8e76d06700b6c5a7f60904a8fdff82e8ec1b73e1d266d5cd97c1948afac9d5003adb147969ef04c804a25255023de24cf6d849585f6d2170b1d03f48c07110f09a90e984aa84ab65ab3944adbac92b91297e1390f4ffffb18050d64d4f2cb0c3fd9bd1605b"]}) 13:57:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1}, 0x2c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x1c2, 0x40) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x1f, 0x35e, &(0x7f0000000180)="355e2fbe7d05dd14f9001fc1a0bb7fd6cae729e23c9ad84e8e33c8685e7bfaa4162c62cb7701b80c57d577", &(0x7f00000001c0)="fc7fb8a130f980f742f7bae8c18c3f0421bd62e088c5300bb26fd011a0c90a5e32806d224a9f82584235c206a9f975abcb0a4ebd54eb8295009389aeac702668007d36ae2d09e7d0e4fb9d941ebaa6bcfcf566c50a55b11696caa6e83d8c0ad4b1bc32ebd73465f85414af2c6531f1ab47be117462d89fc9b21dd8b15fb02a3f", 0x2b, 0x80}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@rand_addr, @dev, 0x0}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008cc4cc8f0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r3 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000300)=""/179) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x3, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167, 0x0, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 588.823504] audit: type=1804 audit(1566223050.260:120): pid=23639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir755239490/syzkaller.tKuwpf/780/bus" dev="sda1" ino=16871 res=1 [ 588.825065] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 588.825072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 588.825098] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 588.861267] Bluetooth: Can't register HCI device 13:57:30 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10018000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xd53d711949d24f3f, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x4) getpriority(0x1, 0x0) 13:57:30 executing program 4 (fault-call:5 fault-nth:8): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 588.930824] audit: type=1804 audit(1566223050.320:121): pid=23640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir755239490/syzkaller.tKuwpf/780/bus" dev="sda1" ino=16871 res=1 [ 588.958264] audit: type=1804 audit(1566223050.330:122): pid=23642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir755239490/syzkaller.tKuwpf/780/bus" dev="sda1" ino=16871 res=1 [ 589.042699] FAULT_INJECTION: forcing a failure. [ 589.042699] name failslab, interval 1, probability 0, space 0, times 0 [ 589.055649] CPU: 1 PID: 23657 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 589.062755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.072121] Call Trace: [ 589.074696] dump_stack+0x138/0x19c [ 589.078310] should_fail.cold+0x10f/0x159 [ 589.082450] should_failslab+0xdb/0x130 [ 589.086433] kmem_cache_alloc_trace+0x2e9/0x790 [ 589.091173] ? apply_wqattrs_prepare+0xad/0x960 [ 589.095819] apply_wqattrs_prepare+0xe1/0x960 [ 589.100294] apply_workqueue_attrs_locked+0xa7/0x120 [ 589.105491] apply_workqueue_attrs+0x31/0x50 [ 589.109878] __alloc_workqueue_key+0x78d/0xec0 [ 589.114435] ? pointer+0xb10/0xb10 [ 589.117955] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 589.122952] ? ida_remove+0x230/0x230 [ 589.126734] hci_register_dev+0x1a7/0x810 [ 589.130858] ? hci_init_sysfs+0x7c/0xa0 [ 589.134815] __vhci_create_device+0x2a6/0x560 [ 589.139288] vhci_write+0x2a1/0x437 [ 589.142894] __vfs_write+0x4a7/0x6b0 [ 589.146590] ? kernel_read+0x120/0x120 [ 589.150466] ? rw_verify_area+0xea/0x2b0 [ 589.154507] vfs_write+0x198/0x500 [ 589.158027] SyS_write+0xfd/0x230 [ 589.161464] ? SyS_read+0x230/0x230 [ 589.165066] ? do_syscall_64+0x53/0x640 [ 589.169020] ? SyS_read+0x230/0x230 [ 589.172627] do_syscall_64+0x1e8/0x640 [ 589.176491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.181319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 589.186487] RIP: 0033:0x459829 [ 589.189654] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.197343] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 589.204593] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 589.211841] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 589.219090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 589.226338] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 589.237171] Bluetooth: Can't register HCI device 13:57:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']}) 13:57:30 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:30 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rtc0\x00', 0xd0043, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x7fff, 0x0, 0x8, &(0x7f0000ffc000/0x4000)=nil}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) wait4(r3, &(0x7f00000002c0), 0x5, &(0x7f0000000440)) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f00000001c0)=0x41a) request_key(&(0x7f0000000540)='ceph\x00', 0x0, &(0x7f0000000600)=')cpuseteth1\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f00000005c0)) ioctl$TCXONC(r4, 0x540a, 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000000000000, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffd, 0x0, 0xd1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd84}, 0x800000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000012c0)=ANY=[@ANYBLOB="73656375726974790000559071f67b271c8633000000000000000000000000000000007d450064bf000e079122dc98568a000000f00100000000000000594e00000000d61fcc09fd36575d1300f80a00000000f80a00000400000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="ac1414bbac1e0101ffffffffff00000073797a6b616c6c65723100000000000076657468305f746f5f62726964676500000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000ff00000400000000000000000000000000009800f80000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000300000020000000960000007ad9000004000000870a00004000000004810000bbf3000002000000030000000000000000000080000000000800000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f800000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000050000008ace0000060000000000008092000000050000000c0500003f0000007f000000f8fffffff10000000600000004000000ff00000006ea0000ac1414aaac1e0001ffffff00ffffff00627269646765300000000000000000006272696467655f736c6176655f300000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0001220000000000000000000000000000a8080809000000000000000000000000000000000000000000000000e0077533320000000000000000000000000000000000000000000000000000001f000000000000000400000001000000090000000300000001000000030000000600000000000000080000000200000000800000030000000600000001000000000000000300000007000000030000000000000000000000060000000500000051c0000004000000050000004000000001000000ffffffff060000000500000008000000000000000100000006a9000080ffffffbc0000009ce90000030000000100000000080000ff030000ff0000000308000000000000030000000900000003000000ff0000000000000009000000010000003abda722010000000600000002000000ff0f000001000000fcffffff0200000008000000030000000104000003000000060000000300000001000080590000000500000007000000ffffff7fd80000008200000008000000ee0700007710000001000100fd26000002000000400000000600000004000000ffffff7f0900000001709a00000200000000000000000100070000000000000000000000030000000100000057000000030000000700000001000000060000000300000007000000030000008000000001000000c4d3000000000000070000000100000004000000030000001f000000030000000700000000800000fa00000051000000060000000000000005000000ff07000000800000040000000300000005000000884b000006000000ffffffff020000000600000004000000ffff0000cee600000900000001800000030100000200000001000000010000000000000001000000030000007d010000030000000000000001000000c3a5ffff0100000000100000010000000400000003000000be00000001000000000000000000000000000000010000000600000001800000f8fffffffaffffff06000000090000000400000019030000010000000104000005000000ffff0000d18500003f00000005000000ff0f00000000010009000000000000000500000005000000010000000b0700000100000002000000040000003f000000d13700000300000001000000020000008c3e000000000000060000000200000001040000010000000600000003000000010000000100000005000000030000008504000003000000000100000900000006000000000000000300000001000000070000000400000004000000000100000004000060d74523ff07000000000000ff0000001f00000014600000070000003f0000000600000009000000050000000901000009000000020000000000000003000000acec000001000000000000000000000000f8ffff00000000ff01000002000000070000000300000009000000010000000600000000000000050000000100000004000000030000000900000001000000000000008f0000000000000000000000010400000400000008000000e4008e1d010000807e000000ff7f0000604b0000020000000900000003000000000000000400000001000000e6000000000000800504000004000000010000000500000000000000000000000100000005000000490000007cdb000002000000070000000300000004000000030000007e03000003000000f8ffffff030000000800000003000000000800000200000003000000ff01000001000000810000006508000000080000080000000400000001000000ffffff7f050000000400000003000000000800000100000001000000fcfffffffcffffff05000000000000000004000007000000060b000001000000010000000700000003000000020000000300000076ffffff0000000002000000010000000200000003000000040000000200000020000000030000000600000002000000000000000000000081000000010000003700000007000000020000000300000001000000be000000050000000000ffff020000000000000002000000ff070000b1000000030000002000000001000080070000000900000040183e0009000000ff7fffff080000000600000014ffffff020000005cffffff030000000600000003000000ff7f0000000000006c44000003000000a4b00000030000000100010001000000ff0300000100000000000000020000000100000001000000ff000000000000000100000081000000070000009b6205700600000000f8ffff01000000060000002d000000000000000800000001000000f8ffffff000000000500000000040000030000000200000000040000cc000000050000007f000000052c0000080000000300000009000000030000000180000003000000050000000300000007000000000000000800000002000000ffffffff03000000eadf0000030000000600000001000000080000000300000007000000000000000080000009000000fbffffff09000000ff03000001000100010100000200000000000100000000006800000009000000ff0300001f000000be00000009000000010000000800000009000000a7f100005c5f000008000000020700005c0000000300000040000000010000003700000003000000604700001f0000000004000003000000ff7f0000020000000000000003000000000000000000000040000000030000000900000001000000080000000300000000000000f8000000f8ffffff02000000f600000037fbffff050000009b080000ff0f000001000000f7ffffff0100000003000000030000000600000040000000031500000100000008000000050000000200000008000000020300000401000030006970636f6d70000000000000000000000000000000000000000000000000000004d5000004d200000000000000006000534554000000000000000000000000000000000000000000000000000000020000007f0000007b52ffffffff0000010000004f01000000000000047f000002000000080000003f000000008000001e9f000005000000090000009c010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0xbf0) ioctl$UI_DEV_DESTROY(r4, 0x5502) dup(r4) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80000) r6 = socket$inet(0x10, 0x3, 0xc) ioctl$PPPIOCSPASS(r6, 0x40107447, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)="c61fdc39fa5b0cd9930728ed0b6eb808a4a68af31f4cbe4bffdae67bc837f94a00b571fd50aeb79782cb2142cdfa06a5e626e4d465ac") prctl$PR_SVE_SET_VL(0x32, 0x12005) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x1a}}, 0x18) 13:57:30 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x803, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "48fa09411def712d902f5004cff7a025b73e6bea84278f39abb0c5ceda0bf211f87591351d3e104cd10787ac62ac70f16659993ef2e9e95189e6d87acd26b8f3"}}, 0x80}}, 0x0) 13:57:30 executing program 4 (fault-call:5 fault-nth:9): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:30 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180022000000001000"/22], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) setsockopt$inet6_buf(r0, 0x29, 0xdc, &(0x7f0000000200)="17f7653b66d9b63bd402830ea02c8b86262826ebb8ff91a58562611044a1cc21cc346810f3ee818a402752f5c6496c1d1f9c07ad10151103178015f4428b32d3ca49c13a8845125e5707427ab6e8f9b98f957f4432c1671d35a1b6970eb5605dc1bb684db7f882332d0f03bbda1b3d9945e172fbe319fd10b3f1b5513abb1204acc1304c7f06741ee0f3a1683c939975ca7a5183cabc74f5e7ce8595dc435bdb8a831a2f467a2534164f8ddcc3ff3e367d6ae72ec40a348b865d8d954a39539933d423fd3cc4911e0361ee32ecf3b0385d18f43b794ff57cba447d8ec872518a12dab25a0a5731327a047ed5fa4a19c31ce5da0750997962", 0xf8) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = geteuid() openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x22001, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@rand_addr=0x8, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x0, 0x4e22, 0xffffffff, 0x7b12bd57bd661bde, 0x20, 0x80, 0x33, r2, r3}, {0x10001, 0xfffffffffffffffa, 0x401, 0x9, 0x3b07, 0x4, 0x3, 0x7fffffff}, {0x1e1f17fe, 0x2, 0xffffffffffffffff}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x2}, {{@in6=@ipv4={[], [], @local}, 0x4d3, 0x3c}, 0xa, @in6=@local, 0x34ff, 0x2, 0x0, 0x3, 0x3f, 0xfd7, 0x1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x6, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x8, r2, r3}, {0x400, 0x400, 0x7, 0x10001, 0x7, 0x3, 0x10001, 0x9}, {0x3f, 0x16da, 0x7, 0x7}, 0x7fff, 0x6e6bbf, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d4, 0x6c}, 0xa, @in6=@local, 0x0, 0x7, 0x2, 0x8, 0x5, 0x80000000, 0x9}}, 0xe8) 13:57:30 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5912ad2b, 0x3c, 0x0, 0x4, 0x7, 0x19, "a815ea25fce692837783fd7f14a3a1a40b500f350ac047cdfd187ff6a30e52be04dafdedb559d3866d552a60b513058c7e34aa71c0e9af212fd5f91b2900f675", "9e74207a543518f83c10f2a60d5388576b57a1342865b2dfc0820fb662acf3550de8097f6e9f6a589d68daec38ade86cffda8fd18fe2a46b37c533814a12456f", "f59b120989f206a0b663086774c351cec6c898f5e88d95ce9ba8ebcc7ffad8e4", [0x1, 0x200]}) [ 589.469895] FAULT_INJECTION: forcing a failure. [ 589.469895] name failslab, interval 1, probability 0, space 0, times 0 [ 589.509472] CPU: 1 PID: 23667 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 589.516618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.525967] Call Trace: [ 589.525988] dump_stack+0x138/0x19c [ 589.526005] should_fail.cold+0x10f/0x159 [ 589.526020] should_failslab+0xdb/0x130 [ 589.526035] kmem_cache_alloc_trace+0x2e9/0x790 [ 589.536378] apply_wqattrs_prepare+0x16d/0x960 [ 589.549559] apply_workqueue_attrs_locked+0xa7/0x120 [ 589.554659] apply_workqueue_attrs+0x31/0x50 [ 589.554670] __alloc_workqueue_key+0x78d/0xec0 [ 589.554678] ? pointer+0xb10/0xb10 [ 589.554691] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 589.563661] ? ida_remove+0x230/0x230 [ 589.563675] hci_register_dev+0x1a7/0x810 [ 589.563681] ? hci_init_sysfs+0x7c/0xa0 [ 589.563697] __vhci_create_device+0x2a6/0x560 [ 589.563708] vhci_write+0x2a1/0x437 [ 589.563720] __vfs_write+0x4a7/0x6b0 [ 589.563731] ? kernel_read+0x120/0x120 [ 589.600294] ? rw_verify_area+0xea/0x2b0 [ 589.604366] vfs_write+0x198/0x500 [ 589.607917] SyS_write+0xfd/0x230 [ 589.611436] ? SyS_read+0x230/0x230 [ 589.615062] ? do_syscall_64+0x53/0x640 13:57:31 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0xf9749d18d782f1d0, 0xffffffffffffffff) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="af"]}) 13:57:31 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) [ 589.619046] ? SyS_read+0x230/0x230 [ 589.622665] do_syscall_64+0x1e8/0x640 [ 589.626542] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.631387] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 589.636650] RIP: 0033:0x459829 [ 589.639850] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.647552] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 589.654837] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 589.662108] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:57:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/240, &(0x7f00000001c0)=0xf0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="9680"]}) 13:57:31 executing program 5: [ 589.669407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 589.676670] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:31 executing program 0: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x7f, 0x0, 0x4}, 0xc) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x6ce5c816, 0x100000001}) 13:57:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ffef5b327f476d5926dec4e424090000000000000002a80c0cdae469e1f365848d48f264010d14039d697be20d007aa8bf24aebaf8c33fd52c48661df3bf12977b2e850400000087c2c50ffc3996a6d5f4"]}) r1 = dup(r0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0xfff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="18a76a370c0efd41731bd3d0b0cfc8e745666236f07f55918226fbf142e9e37b504d2de35d034085398071aa974d7ec46b7dd1d2baf7306d0e15dc0a99bb05aa747b061346ac49007606713b49e45cacba1a7271664674f5b6b25f4592b5ae4039a3b3a62c7c8faf87e0576295fb9ec7540caed2d4207415fbaad997d83a6fb8e4231d007b8d2351dc77c6a5a2dd3840fb7df4cae283fdf293a7d0bbacacdcf80b547b4ae621", 0xa6, 0x4b4}], 0x20, &(0x7f0000000340)={[{@umask={'umask', 0x3d, 0x2}}, {@noquota='noquota'}], [{@smackfsroot={'smackfsroot', 0x3d, 'bridge0\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '{mime_typeselfcgroup'}}]}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000080)={{0x80000001, 0xb1}, {0x53eb}, 0x100, 0x1, 0x6}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0xfffffffffffffd55) 13:57:31 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82, 0x0) io_setup(0xd, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="100000400600"/16, 0x40000010}]) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000180)={0x6, [0x8b, 0x6, 0x8, 0x10000, 0xfff, 0x0, 0xa138, 0x4, 0x6, 0xf293, 0x3, 0x5, 0x6, 0x8, 0x5, 0xfffffffffffffff7, 0x200, 0x6, 0x8, 0x1, 0x1, 0x2, 0x7, 0x1000, 0x7, 0x3800000, 0x7ff, 0x2, 0x1, 0x4, 0x7, 0xe4fc, 0x63, 0x7, 0xc71, 0x2000000040, 0x7b, 0x8, 0x3, 0xfffffffffffffff9, 0x9, 0x400, 0x9, 0x401, 0x1ff, 0x5, 0x7ff, 0x5], 0xa}) [ 589.745512] IPVS: length: 240 != 24 [ 589.745877] Bluetooth: Can't register HCI device [ 589.756575] IPVS: length: 240 != 24 13:57:31 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0xca501d9f6bbf4ed0}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000002c0)=""/58) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000300)=""/23) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00e0000054d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x20000000) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:31 executing program 4 (fault-call:5 fault-nth:10): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:31 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x4000) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffffe) 13:57:31 executing program 0: mknod$loop(&(0x7f0000001880)='./file0\x00', 0x10020006002, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x2, 0x7}, &(0x7f0000000180)=0x90) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_to_bridge\x00', @dev={[], 0x1c}}) clone(0x42000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2e2f66696c653000a0398ff1dc1b75a22e13c4dd5d569f9aa31a2ec22901348f28987c8a7dd4fe43fe25371d7e0d9208a634eacb474c93034f7954b946275b322c1fd1e3dbb4d603b028d6e6f5475a0d49e29a7143c159753607332bbf7a74a4b869fd948db2131edd0b836838bc9fe225a7f4d39ec2f92fc4c95dfcf903ff5953886fa0b36a4e7f944136224270d7fb120000000016aad07d76e412b12d9d3eb800384245a78d77e85b9d38159b428838ba8c3e0a08d1b34da83c0ed9fbbaf84eda47f7bc85ed53ed8085"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='hfsplus\x00', 0x0, 0x0) 13:57:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000001700)='/dev/md0\x00', 0x101001, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)=0x1024) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000001680)={'bond0\x00', 0x100000001}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/full\x00', 0x202, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xd4) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000016c0)=ANY=[@ANYBLOB="29fffffc0700000000004600005c399b51c0cd0489a521a00000000005d600f300960911a298ad7fa5e80200"], 0x2a) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000001580)=0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x4000, 0x0) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000001640)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4) pivot_root(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00') ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340)=0x0) ioprio_set$pid(0x0, r6, 0x5) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000015c0)='./file0\x00') ioctl$BLKPG(r2, 0x932, 0x0) socket$netlink(0x10, 0x3, 0xf) setsockopt$inet_int(r1, 0x0, 0xc9, &(0x7f0000001600)=0x10000, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x1dc) futex(&(0x7f0000000040)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000240)) 13:57:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xe, 0x6, 0x400, 0x3, 0x3e, "c9e78e61730cc849031210abc3b5209c2996461a088850bd31674e89e02c477954726861e20af14bcdcc77f2c16723f981aa3e5f9a10f26666d47ed19cfe"}, 0x4a) [ 590.367717] FAULT_INJECTION: forcing a failure. [ 590.367717] name failslab, interval 1, probability 0, space 0, times 0 [ 590.441906] CPU: 0 PID: 23722 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 590.449050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.449055] Call Trace: [ 590.449075] dump_stack+0x138/0x19c [ 590.449091] should_fail.cold+0x10f/0x159 [ 590.464649] should_failslab+0xdb/0x130 [ 590.464662] kmem_cache_alloc_node+0x287/0x780 [ 590.464678] alloc_unbound_pwq+0x486/0xbc0 [ 590.472766] apply_wqattrs_prepare+0x355/0x960 [ 590.472784] apply_workqueue_attrs_locked+0xa7/0x120 13:57:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[]}) [ 590.472796] apply_workqueue_attrs+0x31/0x50 [ 590.481569] __alloc_workqueue_key+0x78d/0xec0 [ 590.481577] ? pointer+0xb10/0xb10 [ 590.481593] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 590.481605] ? ida_remove+0x230/0x230 [ 590.481621] hci_register_dev+0x1a7/0x810 [ 590.481627] ? hci_init_sysfs+0x7c/0xa0 [ 590.481641] __vhci_create_device+0x2a6/0x560 [ 590.491285] vhci_write+0x2a1/0x437 [ 590.491300] __vfs_write+0x4a7/0x6b0 [ 590.491311] ? kernel_read+0x120/0x120 [ 590.491329] ? rw_verify_area+0xea/0x2b0 [ 590.491339] vfs_write+0x198/0x500 [ 590.491354] SyS_write+0xfd/0x230 [ 590.500300] ? SyS_read+0x230/0x230 [ 590.500311] ? do_syscall_64+0x53/0x640 [ 590.500320] ? SyS_read+0x230/0x230 [ 590.500329] do_syscall_64+0x1e8/0x640 [ 590.500336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.500354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 590.500362] RIP: 0033:0x459829 [ 590.508868] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 590.508878] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 13:57:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) [ 590.508883] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 590.508888] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 590.508892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 590.508898] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000700)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="3bbfffb363c8d180dae4bff5d81a70daff7a86e547ce31cf21368d0081fcfdc8fa2206bac2d1f8efce02c035b87f325c61aab3f239512888c78267db1f727be8370702428e58b5e95585b1dcc7af9ca037a8ff4e1e9eaca6af95adefe1de67beed7abf2b1c03f5281094487525d2088a6becbece6a3e93a1cf67803ad7d3072cefb13a3a5e5b7980811a10e299ee071f37696847a74505a1f61264a64e46c44bf55c7a7f66e7e5ce8b4d45af92a890fa2a786ba84fbacc4fcf9097cca0e283062400ff1170757fd772eb5c2e0d41aa126fd0ab", @ANYRESDEC=r0, @ANYRES64=r0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYPTR, @ANYRES64, @ANYPTR, @ANYRES64=r0, @ANYRESOCT=r0], @ANYRES64=r0], @ANYPTR64=&(0x7f0000001780)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="a6617917236b239eb556bb9e33f7e51f7adc77c4dbe0927c8350e910fb98d4c0313f70d843e0545dc7a990877fe7bfa227e0ddd9a862", @ANYPTR64, @ANYPTR, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRESOCT=r0, @ANYPTR], @ANYBLOB="7eca344bb79991f8c5f6c7d1adc2988b957f97f4dbcfd9372b07559615dd842db04b643e05535a2443967539847ea47023077aa80572", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=0x0, @ANYPTR64, @ANYPTR64], @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES64, @ANYPTR64, @ANYRES32=r0], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYBLOB="1d5a0dad30bce19278f109ac78e017834a33f1ae22a44a200f0f054ad345df112e637fe5bd19885c14fafc052f8b6ac799bed92e85b2beeac06094e380f735e1122968f2e9118d64dc4d5bbc81d354bf5c85b1fd4745d5e10033d22b89c49ca05023409478bd73973d667564c4731f8ebc4a758d282ab0d4b26fe52a96e72f1417a402983a0e4b32207740942896f2e44f990d917c60ab6e6bf8c8", @ANYRES16=r0, @ANYRES16], @ANYRES64=r0], @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYPTR64, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=r0], @ANYRES16=r0], @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT]}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000001840)={r2, &(0x7f0000000380)=""/168}) 13:57:32 executing program 4 (fault-call:5 fault-nth:11): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 590.684430] print_req_error: I/O error, dev loop1, sector 2 [ 590.690915] hfsplus: unable to find HFS+ superblock [ 590.712465] Bluetooth: Can't register HCI device 13:57:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7ae0ff68, 0x101000) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x1) write$UHID_INPUT2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000d8004e6b4b5aea37ae53fa68237c8b05c8586307d325104bc6830f452050e4400be1a431a45b511d3a8773b2fcf0bfb3bbf4c71705993ada8e2040e284b3ff3d2943531277a0b610c1e0689f88b8251fe580a67e023cfb9d40fa1b41d12ac8c3dcc8ff371a0060977230df08fdd1b254667160928a5a9138b93893bcf6f6ed1add83cc4d68227e16f55b294f2b374002fdf2a26c28fbee840d3850246134f7cb1eda74f7f771dd335b1b1b5fbe6225dfe4404192e811598e1101088a12db49d5020be9d578535bdc40756523b27003fc8abcb61c123e837b9857"], 0xde) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000240)={{0x2, @name="18b668482ced51a2005928e843e2b134fee95c63daea54b4764fe226e8f8640c"}, 0x8, 0xfffffffffffffc01, 0x8}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'yam0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="926197321bee357f024b0419700364ebe16213af627c9cf88caab2ececc3ada39de728e23424281790e9acad26084e6d5b63a34d4f9c81852c36e0d51d2fd67906efd52d0b7ff237bf21eb17383467938942ad9f3407d05073f592e1d82d3fcc64decc64f4e12368d599581c84c1fb06d84846c21c3099"]}) 13:57:32 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000340)=0x4) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x200000, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000001c0), 0x800) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000200), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhci\x00', 0x200100) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev, @in=@local}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000000380)=0xe8) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="c6"]}) [ 590.864186] FAULT_INJECTION: forcing a failure. [ 590.864186] name failslab, interval 1, probability 0, space 0, times 0 [ 590.878219] CPU: 0 PID: 23764 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 590.885369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.894708] Call Trace: [ 590.897283] dump_stack+0x138/0x19c [ 590.900895] should_fail.cold+0x10f/0x159 [ 590.905153] should_failslab+0xdb/0x130 [ 590.909135] __kmalloc+0x2f0/0x7a0 [ 590.912663] ? wait_for_completion+0x420/0x420 [ 590.917238] ? pwq_adjust_max_active+0x372/0x560 [ 590.921977] ? __alloc_workqueue_key+0x114/0xec0 [ 590.926711] __alloc_workqueue_key+0x114/0xec0 [ 590.931271] ? pointer+0xb10/0xb10 [ 590.934823] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 590.939826] ? ida_remove+0x230/0x230 [ 590.943614] hci_register_dev+0x209/0x810 [ 590.947746] ? hci_init_sysfs+0x7c/0xa0 [ 590.951703] __vhci_create_device+0x2a6/0x560 [ 590.956179] vhci_write+0x2a1/0x437 [ 590.959787] __vfs_write+0x4a7/0x6b0 [ 590.963476] ? kernel_read+0x120/0x120 [ 590.967359] ? rw_verify_area+0xea/0x2b0 [ 590.971395] vfs_write+0x198/0x500 [ 590.974965] SyS_write+0xfd/0x230 [ 590.978395] ? SyS_read+0x230/0x230 [ 590.981996] ? do_syscall_64+0x53/0x640 [ 590.985951] ? SyS_read+0x230/0x230 [ 590.989559] do_syscall_64+0x1e8/0x640 [ 590.993432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.998255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 591.003444] RIP: 0033:0x459829 [ 591.006609] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.014300] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 591.021549] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 591.028793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 591.036038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 591.043281] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 591.053710] Bluetooth: Can't register HCI device [ 591.064136] IPVS: ftp: loaded support on port[0] = 21 13:57:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:32 executing program 4 (fault-call:5 fault-nth:12): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 591.203043] FAULT_INJECTION: forcing a failure. [ 591.203043] name failslab, interval 1, probability 0, space 0, times 0 [ 591.215337] CPU: 1 PID: 23781 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 591.222462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.226403] print_req_error: I/O error, dev loop1, sector 2 [ 591.231840] Call Trace: [ 591.231862] dump_stack+0x138/0x19c [ 591.231877] should_fail.cold+0x10f/0x159 [ 591.231891] should_failslab+0xdb/0x130 [ 591.231904] kmem_cache_alloc_trace+0x2e9/0x790 [ 591.231912] ? wait_for_completion+0x420/0x420 [ 591.231922] ? pwq_adjust_max_active+0x372/0x560 [ 591.231930] ? __alloc_workqueue_key+0x114/0xec0 [ 591.231941] __alloc_workqueue_key+0x15f/0xec0 [ 591.231948] ? pointer+0xb10/0xb10 [ 591.231960] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 591.231971] ? ida_remove+0x230/0x230 [ 591.241852] hfsplus: unable to find HFS+ superblock [ 591.243890] hci_register_dev+0x209/0x810 [ 591.243898] ? hci_init_sysfs+0x7c/0xa0 [ 591.243912] __vhci_create_device+0x2a6/0x560 [ 591.243923] vhci_write+0x2a1/0x437 [ 591.243935] __vfs_write+0x4a7/0x6b0 [ 591.243945] ? kernel_read+0x120/0x120 [ 591.316322] ? rw_verify_area+0xea/0x2b0 [ 591.320383] vfs_write+0x198/0x500 [ 591.323934] SyS_write+0xfd/0x230 [ 591.327380] ? SyS_read+0x230/0x230 [ 591.331004] ? do_syscall_64+0x81/0x640 [ 591.334969] ? SyS_read+0x230/0x230 [ 591.338586] do_syscall_64+0x1e8/0x640 [ 591.342464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.347330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 591.352509] RIP: 0033:0x459829 [ 591.355689] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.363388] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 591.370652] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 591.377913] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 591.385170] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 591.392431] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 591.403336] Bluetooth: Can't register HCI device 13:57:33 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mknod(0x0, 0x8000, 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000004c0), &(0x7f00000002c0)=0x2c0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000380)) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@remote, @link_local={0x1, 0x80, 0xc2, 0x689}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x3, 0x6, 0x0, 0x0, 0x0, 0x6, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [{}]}]}}}}}}}, 0x0) close(0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x100000001, @mcast2, 0x16}}, 0x0, 0x10001, 0x8, 0xc94, 0x10}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r2, 0x4) 13:57:33 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x200001, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0xfffffffffffffd17) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) sendto$inet6(r0, &(0x7f0000000140)="b7277852d67e2ee2f6777cf265e5d589d1b6f67fb7967d60b8c1b738a186b9d624632955acc8ea037d473e3306f983b13bc8890c555e4a21876f59906b44fbf4b764280a00c92a6d077a2c2cb51b8c757cd3c38268cf60376123b4d1e3c7eef83216", 0x62, 0x4000000, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c) syz_mount_image$minix(&(0x7f0000000200)='minix\x00', &(0x7f0000000240)='./file1\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000280)="bb30046480cf62d16ed01ddd12ece3d1a841e6f5f2d2f622bbb913a27674c69569ff7df60693880928c1bbc7c44592232ee23cc832a67d3997d316eed400d53fe0ea92afc3dc89855104f2027d65392f", 0x50, 0x5}, {&(0x7f0000000300)="b56cba93fcb4fa64471b9b11a6eb10f909e2bbdb8e47d0975ba1789124f3573a8671", 0x22, 0x8001}, {&(0x7f0000000340)="472acabdb81f2722feca8f52ce6295e1ff42f24b647ab2db6cb735f9b386b8d6d28c8dac5642fd6aea5da52f8216b82e829b982b64f7aa12c07069964289d051fe58c56258cd9765b8b24b8c17981a70b7663331f6f8f4", 0x57, 0x4}], 0x10004, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8000) 13:57:33 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0xca501d9f6bbf4ed0}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000002c0)=""/58) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000300)=""/23) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00e0000054d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x20000000) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:33 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, "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"}, 0xfffffffffffffee3) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x306, 0x800, 0x49c1, 0x1, 0x4c4e9422, @random="13bbd9a30a2d"}, 0x10) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:33 executing program 4 (fault-call:5 fault-nth:13): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:33 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 592.164361] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 592.188300] FAULT_INJECTION: forcing a failure. [ 592.188300] name failslab, interval 1, probability 0, space 0, times 0 [ 592.241366] CPU: 0 PID: 23796 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 592.248532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.257876] Call Trace: [ 592.260454] dump_stack+0x138/0x19c [ 592.264067] should_fail.cold+0x10f/0x159 [ 592.268198] should_failslab+0xdb/0x130 [ 592.272154] __kmalloc+0x2f0/0x7a0 [ 592.275673] ? __lock_is_held+0xb6/0x140 [ 592.279711] ? apply_wqattrs_prepare+0xad/0x960 [ 592.284356] apply_wqattrs_prepare+0xad/0x960 [ 592.288830] apply_workqueue_attrs_locked+0xa7/0x120 [ 592.293909] apply_workqueue_attrs+0x31/0x50 [ 592.298292] __alloc_workqueue_key+0x78d/0xec0 [ 592.302846] ? pointer+0xb10/0xb10 [ 592.306363] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 592.311357] ? ida_remove+0x230/0x230 [ 592.315140] hci_register_dev+0x209/0x810 [ 592.319263] ? hci_init_sysfs+0x7c/0xa0 [ 592.323218] __vhci_create_device+0x2a6/0x560 [ 592.327687] vhci_write+0x2a1/0x437 [ 592.331293] __vfs_write+0x4a7/0x6b0 [ 592.334986] ? kernel_read+0x120/0x120 [ 592.338856] ? rw_verify_area+0xea/0x2b0 [ 592.342896] vfs_write+0x198/0x500 [ 592.346415] SyS_write+0xfd/0x230 [ 592.349864] ? SyS_read+0x230/0x230 [ 592.353467] ? do_syscall_64+0x81/0x640 [ 592.357417] ? SyS_read+0x230/0x230 [ 592.361018] do_syscall_64+0x1e8/0x640 [ 592.364898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.369718] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 592.374882] RIP: 0033:0x459829 [ 592.378048] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 13:57:33 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0x2, 0x0, [0x100000000, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 592.385732] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 592.393076] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 592.400319] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 592.407563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 592.414815] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$getenv(0x4201, r1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'nr0\x00', &(0x7f0000000100)=ANY=[@ANYRES16]}) 13:57:33 executing program 4 (fault-call:5 fault-nth:14): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 592.500673] Bluetooth: Can't register HCI device 13:57:34 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x501000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x200, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) [ 592.594011] FAULT_INJECTION: forcing a failure. [ 592.594011] name failslab, interval 1, probability 0, space 0, times 0 [ 592.615554] CPU: 1 PID: 23822 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 592.622795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.622800] Call Trace: [ 592.622817] dump_stack+0x138/0x19c [ 592.622831] should_fail.cold+0x10f/0x159 [ 592.622849] should_failslab+0xdb/0x130 [ 592.646483] kmem_cache_alloc_trace+0x2e9/0x790 [ 592.651133] ? apply_wqattrs_prepare+0xad/0x960 [ 592.655778] apply_wqattrs_prepare+0xe1/0x960 [ 592.660254] apply_workqueue_attrs_locked+0xa7/0x120 [ 592.665349] apply_workqueue_attrs+0x31/0x50 [ 592.669738] __alloc_workqueue_key+0x78d/0xec0 [ 592.674304] ? pointer+0xb10/0xb10 [ 592.677833] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 592.682828] ? ida_remove+0x230/0x230 [ 592.686631] hci_register_dev+0x209/0x810 [ 592.690758] __vhci_create_device+0x2a6/0x560 [ 592.695234] vhci_write+0x2a1/0x437 [ 592.698853] __vfs_write+0x4a7/0x6b0 [ 592.702561] ? kernel_read+0x120/0x120 [ 592.706449] ? rw_verify_area+0xea/0x2b0 [ 592.710489] vfs_write+0x198/0x500 [ 592.714026] SyS_write+0xfd/0x230 [ 592.717457] ? SyS_read+0x230/0x230 [ 592.721061] ? do_syscall_64+0x53/0x640 [ 592.725024] ? SyS_read+0x230/0x230 [ 592.728633] do_syscall_64+0x1e8/0x640 [ 592.732513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.737334] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 592.742618] RIP: 0033:0x459829 [ 592.745786] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.753474] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 592.760738] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 592.767984] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 592.775227] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 592.782468] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYRES64=r0]}) [ 592.835407] Bluetooth: Can't register HCI device [ 592.875150] 9pnet: Insufficient options for proto=fd 13:57:34 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x0, r2}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) 13:57:34 executing program 4 (fault-call:5 fault-nth:15): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 592.984345] FAULT_INJECTION: forcing a failure. [ 592.984345] name failslab, interval 1, probability 0, space 0, times 0 [ 593.001555] CPU: 0 PID: 23845 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 593.008689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.018042] Call Trace: [ 593.020648] dump_stack+0x138/0x19c [ 593.024274] should_fail.cold+0x10f/0x159 [ 593.028426] should_failslab+0xdb/0x130 [ 593.032389] kmem_cache_alloc_trace+0x2e9/0x790 [ 593.037050] apply_wqattrs_prepare+0x16d/0x960 [ 593.041629] apply_workqueue_attrs_locked+0xa7/0x120 [ 593.046718] apply_workqueue_attrs+0x31/0x50 [ 593.051105] __alloc_workqueue_key+0x78d/0xec0 [ 593.055665] ? pointer+0xb10/0xb10 [ 593.059215] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 593.064214] ? ida_remove+0x230/0x230 [ 593.068007] hci_register_dev+0x209/0x810 [ 593.072142] ? hci_init_sysfs+0x7c/0xa0 [ 593.076096] __vhci_create_device+0x2a6/0x560 [ 593.080577] vhci_write+0x2a1/0x437 [ 593.084188] __vfs_write+0x4a7/0x6b0 [ 593.087885] ? kernel_read+0x120/0x120 [ 593.091753] ? rw_verify_area+0xea/0x2b0 [ 593.095805] vfs_write+0x198/0x500 [ 593.099322] SyS_write+0xfd/0x230 [ 593.102765] ? SyS_read+0x230/0x230 [ 593.106377] ? do_syscall_64+0x53/0x640 [ 593.110328] ? SyS_read+0x230/0x230 [ 593.113943] do_syscall_64+0x1e8/0x640 [ 593.117809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.122645] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 593.127823] RIP: 0033:0x459829 13:57:34 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0xca501d9f6bbf4ed0}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000002c0)=""/58) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000300)=""/23) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00e0000054d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x20000000) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x3, 0x8, 0xd85b}}, 0x28) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4400, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000180)={0x8a, 0xff, 0xe4f, 0x3, 0xbefb}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80901, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U+', 0x1}, 0x28, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:34 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:34 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 593.130997] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.138684] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 593.145944] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 593.153209] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 593.160463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 593.167714] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 593.181704] Bluetooth: Can't register HCI device 13:57:34 executing program 4 (fault-call:5 fault-nth:16): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002000006008, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x802) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @local}}, 0xffffffffffffffff, 0x5}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r2, 0xfffffffffffffff9}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x7, 0x2, 0x8, 0x4, 0xfffffffffffffffe, 0x6, 0x8, 0x69, r2}, 0x20) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKROSET(r4, 0x127d, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="10cf9a60c469579f76ab813862003faf7e8b8d9e7eb93bcd0a0bcaf2cecb1a4ee71c73aa2e757316be97113a47bbe966979ad55ec78ae50c9ee540ca492f"]}) [ 593.312242] FAULT_INJECTION: forcing a failure. [ 593.312242] name failslab, interval 1, probability 0, space 0, times 0 [ 593.330820] CPU: 1 PID: 23866 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 593.337964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.337970] Call Trace: [ 593.337988] dump_stack+0x138/0x19c [ 593.338008] should_fail.cold+0x10f/0x159 [ 593.338028] should_failslab+0xdb/0x130 [ 593.338039] kmem_cache_alloc_trace+0x2e9/0x790 [ 593.338063] apply_wqattrs_prepare+0x16d/0x960 [ 593.350005] apply_workqueue_attrs_locked+0xa7/0x120 [ 593.350019] apply_workqueue_attrs+0x31/0x50 [ 593.350029] __alloc_workqueue_key+0x78d/0xec0 [ 593.350037] ? pointer+0xb10/0xb10 [ 593.350051] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 593.350063] ? ida_remove+0x230/0x230 [ 593.350079] hci_register_dev+0x209/0x810 [ 593.350087] ? hci_init_sysfs+0x7c/0xa0 [ 593.350105] __vhci_create_device+0x2a6/0x560 13:57:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_SET_SIZE(r2, 0xab07, 0x0) 13:57:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x10000000000, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000002a40)={@null=' \x00', 0xf, 'tunl0\x00'}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setpipe(r3, 0x407, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000080)=""/58, &(0x7f00000000c0)=0x3a) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x2df38707f3c2aad3) recvfrom(r1, &(0x7f0000002c40)=""/4096, 0xfffffe49, 0x140012044, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002c00)={'vxcan1\x00', 0x900}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x28, &(0x7f0000000180)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x1038b) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000002b80), &(0x7f0000003c40)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003c80)={'vcan0\x00'}) sendmmsg$inet(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="99e058aacae17d0b2af90a1f6014ad8784502d81369e7028de4a7c087bc75a03d7530c1c9f747b2f32e27b60bbae78896c8244d378d7d846f50b6bed4e9bb9e57192a42cf5b33de6882a7e66f752a38debc6bd3e92ba49dbadcc33d44ff9863fb89c18a4fb65", 0x66}, {&(0x7f0000000040)="ce9c04032acf73fb76274358200c6f13f2200d5d3eafe7c1a1", 0x19}, {&(0x7f0000000180)}, {0x0}, {&(0x7f0000000300)="bd181f1fed511024491d85e84a8825aacdecc388c4b08891147ae7dad177b553bb8544dfa14a5218084f1568589c84d778f7768304fa3ff13471180988aa37de10", 0x41}, {&(0x7f0000000200)="1e64a222bd938d4e45af23978fb4107cda2329b52d45ed1041823ee52ee793664a414b1b59a727dd34a83e82e03e4e901b83ff0c9fe74cb7", 0x38}, {&(0x7f0000000380)="c2e1d618cf797865243d3d8ae3aeea0f644b16ffa2eca6cd2fb9edada53f35a81ec684af76de5a930b4b0e257266cfc18f1e04cc7361b2827429afc96662b1b182c7c10781140a36a17810e574430bd6f6f7d6d7439ca67d149b5f13b7c891", 0x5f}, {&(0x7f0000000400)="b9292dfb3eac4c8765e47aab8119b7277e349a1eafa5a5594a96bf2aab8820cffdcee6", 0x23}], 0x8}}, {{&(0x7f00000004c0)={0x2, 0x4e23}, 0x10, &(0x7f0000002940)=[{&(0x7f0000000500)="1129d37a4213", 0x6}, {&(0x7f0000000540)="679c71e05c96ad914f318b4461e2912ae965f50f871026a90a", 0x19}, {&(0x7f0000000600)="94769890a4853f7c1ea6c94222773f088bd5b7eee30c0f81d13053e7329d9ad43f6a6b80e59a8a1fc32930a7ba4cef08fa184be14abf7f087a201bd93eed2196d3b3d4c8405f8b8c7dafad99bcea1f4ba52f59c25012cfba013fb397a4be14b5868aa0475570acf523de6aa8", 0x6c}, {&(0x7f0000001680)="22a71f7cd9a968934d59ae412d2acb039b3f83232a5f128cb776c9febda4e2cf83f44042c88269e743748ceb0f62c7861a18407f3d17ef209b5227a7b201b21c736f7f922ce9a480eb894492ff5481f96037e4927828c5660a44169d6178ea358686626409d0d29a8a0945bfc5f1fcc52b0dc6dce1c1287cbc384180033d942a92e45752c3602b42a1aa5f2969fa1aa3c82350af102827b149c986919136e4c0d80b2d78900996ffdd6287e4d1e9c85f3d1b1289ce355dc62c13f19254da06087c3130e97f6fb5512223eaf7712bfd4f430ad9cfebd1159b1e6f7b4fd271ac0def8e265d7628dd190cd3d5d079d55a83af8320d8d2fb288bb571356366e492b8418d7cb582e10b09023a8ae670b0491b914e20bdc0d824e597cb7c78f37190e69578204060237c984428e4c1b58eec2de281fed2de59899d2974e971dd213833776c8b3fdc2bcc1d1b9d79a3e93ec4e682ced312430d7b360e57c2e50ebc21dfdfae7eab990aebd29dc3513ee43822287d4475416f99eaef073542c67d19e92468ff51e345027d05f59fc2365095e2a7848c0b56614204b1a1487b43d0a8a09f4ac915d2342c2fa29e2d837f6c54e92f7cb82093ec9799107409fa5a1c775bbc0e87ccb8fa8ede2098e6197bac7b9d9fc051776b37f9c2947cca3e7360919f253acbf391a098c8873607a5c37e51d1ad207a8f1b7a5fbb33ea18fa24608bd32f1f5cd9f0a840dad68847f8a45913ce1a94edb52a6cd3e31732226caad3dfea7c20dcade32c9fdbcffb304337917b092dd52a0a66e60dbf2fa868cd0889877183f8727f5ec7d87d19c0824c509b05ae9a9e971c91e27c69facb582aadbf5c83e68da14bacbcaba0c990bd99f010d9bfbc1f63d1a80bab96a34966c10fe2c608a61dbd873dc3d9802d6393205228449f033da87e8efb342318571d46743803b25617031f373f05c2f03ae6da7b9752a100d72f5c8dfbfa9339e6b4cae5f756896fb5de1d2a64be31241abac8bf4b183c87c9d463ad79230b9a59da661cb941a5308318a33bcc623b633fdcf3a76d7a3467488b7a04b9c84a1150bd9837fa6311aab84ef31f25115e989571fdcc0d28eb104b31e6a725050606ea79da4c7f601b4b4bc5d734992124053b1d19ded5d12e2e87f9ac99b4423af93e777f15a93e89f9bbfc88808fc327cc037e3947dee30a2007184b5259f063328bf6e6b2342dbef0281b4c9e72ee856c34553f9a5d09771435ae5e0b85e09138940c368c61a0c0543540a332cc8843dbcb2d28779dcef4ea281b9066974d76aaa24d04fe7361781670c8e85bbac7513fb6d1c030b2fce93424ea166345bb3cd147fdcce937b83280af55dbf598e7cd31fc38f3af1e1a7e06b42b1f8cc34eae38595c8045d9353ca5861ab8a9b0f72800391b11b7b29be82abd8f6e047dd013ddacbb1fc34f0e1a7f315e5daf31e86be83ed43c048be3928e62d9e2dfb7be21d3a18fcb194369e5f99717eae03603259fec03f486c71d00dc9cc3310e2e5cb5a1d07990796f75f669f97b8b4d327cca7101e43afe667aebaa734b1703e04af611e5fea299d2b113297de008f39334c6ec7a849b3fc6034853ddde45b8715505b78ea1ff1379488598f1e3918bab61af8d68d744c8086bce967f3fa789408cb7ec439936b1fe0e52ec5da87a573e1567362dee9da00421fb16ae8c5acbd724c21c97e07f808c36e377d56f97d20ee684cc8ee1eddcc3f67551e481fee6a12e8a1697be47d67626c19bc43c68e365447c12cc7aaea98a7838794e05a9b4ddd30f801d809049bb64f2002dddc7ae0a3fc04ec48736b716f10ff1ae8eeb59a9c522529d09ba345b1553486d7f03469ee9e33c8d6a4f173180f0afcefbc56303419d7f7a5320adc76d4d84f43ffefd706abff57ec321fef4a3dd3ff4748044167c8d1a2f9a1b35617824a4f9666b3c143ee38c83e2cab0c2bdc25e5b63882ef8993ab16554d01a9fe14e9418b413dfd9965b41d5a87fd5e4a8760d929d7c45cde55bee05e8eced0691658a9208c0364d6859bb6a7ce01594082f5905a8fad447a247f32c13a1d2cec2112331fa2bcdb95c91f672d77add89044a1925337b1db3a01e18d9c46d4f7d834baa9287b4cb6fe5095644bf35e4a46a11e9b754a2ff30dbef1e5fd178210a028fa9423660647c2f12c651deb04246a49817eb44400c6a4610084c90706d6f4872be468984834077f61f8a90b8d84fd91b08738d0cc7954d213c980eb0284c6e2676c987a4765a2c41d79a8b0bd349b0970b1363447bce84486bb09d87710c0e220e9d5223b12d8165ccef6c9ea618f406877ddb4622fb3512851c4ffb0e19a7b759764544be311e3927b55ada9838a0bdea5749c3413c8f382bba6522ef4ada1270881debaec298575cd240e65367f23bd9d5aa0ba08144793fb90d15b2c7a832ad3a0e9c8e080e8ec277c85367d51615ef0177b39c22bf141f9872eaf4250f9c3cfcb6bf267e632e86f01d8c75bb4b19cbe93a11f45826d24cf07b7033f3f7576f9132ace11498121c0dfd717c4306193d359d0237883e4baaa6d15f3d79291c6d8683174ff2ef139fe9396c3364e5995640457026b2cb8d8dddd1672eff1175e044db70710c115feeb647b83aa185e8747c733b82496aac5f572ad4c6373cb1c5e8db114ebb8ed30cf3e7549d621c00d19d89accd7750d302d6a9a1f9bc6c3c74078122e50bde719fef6c672d8e0a5686553ba948ffcf9db37bd608a2058624b129564733acfb84b6efdc631692271a06e40862012b50b387f6ee7547cc8c96343f40e61fde65d0fd2184bdd87089068d10c23c942743c0f41647e3f34823aa2da414578d337e00e9c81847ce9d9c1d2fda79fc8d0cd951336edd0a930720d6acd3aa705f5cb1e23cc9d091053c23505c188c06f3835c8b3f30aecf3f3e552a4b38606abb941935be8121aee841c34341a102a0caef1007ec645789eab7b0902cdef410df0cbc21d24d12b60c9911fb2d34e7dba14dfb30bfbf2f68c33d312e2babdcd8b8b15c30fe3e086d1a6bd0539c0928e87c95cc971f9d6355c4e5d5db475b220ded446d6f5d938f82f0d3d874af011349b8322d1b0aaea094b49bb481200df9b1037441a7383e86a952529c9137146ed215b8f4673453764d7025b536b75907ba9082901ca2f395958e3cd31414108663e255f1eaed4d1d92d77f27e37dd355806eb3616a754ff1df1b93060e02776756931c6baabb4fea0792a9af0da54cc528bf25643624735430728542f9ac56de4af2a3d6f09b49df8358ae6ed08b6bb41a0e02121e02078315a55554442bc3ecfd8d7aa939cd306b15d4f8deff40f860291f2d1e97f80af1cd4435d17b7a66f0e86806de09114ebe46aa03f0808c5fe0c8f0395f183dbd30acabc9576e64c8ad1460f6fd06d7cf9d45e744873dda1f2077da6ba86c81590a96b9a97f2c1b8ccb48bfb8d2fb4d2ffabe820249b8b88b718555c9921bd25166da36398329fd94497bfb6e20a0ff63134ce18e03617a1326bc8ea38b015b1ba813b08c2587d44105d431e05693f34c948f51fa78471b96336c6ec1c791da59b44a21e1d6ad38b97c9d7f3e5114e64c5793e5a1b7b83858be9b028fa0229997b3009ab9c3b6f1aeafc6540fd8eb2d12e89cfdff1c7739ed3dfe295774d4122007b7f4e2b5fce14da8494251c206354aea765ec80082e8401b79300c7b9201e6783ab371150ddab9f5ed36f87f5105d51484d5650c7d4f24d74f451ae81bd2e2dfc483ce544d981965d44b4dc49f49eb8d70eb00f3a3a7c43268a87a2bbb88f87d8687aa87c9dfddbfeb67eb7395d0d9e2f44e693aab0a0f9dab557cdaa44960e6065793fd76ed9f6613d251f951db01ba29186768aed4da6c012d589f1fde07d12db7b1e1a06ba2fba2515a3baa9fbe706cf986676de2f64ef3189f50b42682cf8563296e28482fdfeb9e9cdcd13f7aee68e6d663f7bb326b8011c1e68a536cf6a9e68233efcca62bd453f6f7d57510e5232650f07a0ff9683f49e42c7bdfc3a776d9d0133188c0501f531a42612130b2de371bc532d036cd17fca3bc3856262a050a64d603fa5097af969cb636e2ebee0ae3627ebb5a9fe2b4139a2fa3c55a06870a185eb8d32e6ec9f21c0b8464b1663772f29edfb84c3474d75d6bc7a6cc0132c63f451f6694c2c0e351b3f9ecf40e527e66aac8c13f06de1986836b9fc1a7272a1fe5b411faf806b13385ecf207a6910a471489d5ce67574d3269360f0bae66f370d6cc7681eecdf82a5f76ee7c4db8723fefbcbf8c1ad60dfac6bc03a9552a1678b283f9ad3f0eabeb9a9ee421405187ace126b3bab434b430b7ae23a65524a169ff608b05ae66ef3261e5ed66b9d738e9e4ad02f362b978dff853f11e2496b04cd7c4bb15cd9a1fa0771fc77352f87051172ec7bb2cbfe01aab1dbad57bd4c00dc9feeb4dd44d554eb8a285adb90fa7c11c0e5cb9ec993f37be50ce95ec89c4a6196f69096636c3eb865db5aef70386268f98a5112c972166f01da56b685a1a27ef7f2c609576c69a64a11191435ffac7c22e60820df3cc5ee4b5df642ec1c394738482b72d3cd798d78940b4467c8c369c34d8e84a3e209a4f57cfd2cc2a5f5e94aca33ba2b3a412d1b2229c7c9967e6137e91a9ea964723e5e76e6c02d563fa08ce997f7782c281909795e69da3945023bd929758948a868fe3fecb2897e58422cec61acd8785ae8292b0ddd06e8b0a17d43af707dbbf8e5140edbf947088198a4f50fe96b413b38a9711628a1d1c18b9b9bb0a08e63970549ea197f9b521df7a605ea6a6ca5bbdebeb98a83d61aa2304853056cde50e3bd80b0e7b57a091dab1e9b4878d4090370c3460b3b813d9b4212968d249b01bef6665205d25d0d399571858f6307fb164c8114d574aa076df59bfb6fa77921a82d2bac73b974dc4d1cabc7ff731a48f8295c7a1ce6e1124414fce24646b41d7073b9de4463b5094eaef706346b23c5a2c1eb30935093e1cfe3e4df9d7af7a1110d9787f23ce42d8ac057a125369cde8fb1cd1dc7cbe803b0ec2ca0e9f5e900845ec30583d0dc8c27a0435b78b9e0ac80f7282eba55c32dff90ef89c2e721bbaefe5919e5e43c3de62d68e5529c4ff051e0440bc3b7806af78d649dc6ad4a3afda708d41678da195ce9bb367fa18b4d1d40e38bfe2e8806203052d1a13db5bfb136b0f91eecddfcaaa84908adebdbc187021c671c8528f8a7688b3dd1741051f898afe52844a695fb079dd3e366d6850920f2ed973559622ebc81fd384b511995d8282e6c92c0aad3fdd440c8a47cde0d3255768814a3e0fe1e027756b9171db4ed3635c8e5733b83db1b9d88a9b2f2c5e64f14bdb4ac277248394818fded4a34a49c31f729023650b7d6bae8f4e761475b1ea09c383c9099adb65fc2046352ccdb0fc360a3d8114af9344813cdc3529e0ce2ce59eb999fe5fafdd1e01c9bfa417674254b7cfbc9174a6b1333fe2162d8ba2072d1af7aaa9f1e0673740c00c22eb0672acbf10db01b8466fc854ed962540710674de0a21f1b88b2d4bbf8fa33b61b80c03e77ace0484d1cc48e89a610a7ea51cec625d58e9e27ebf8891ba7c4b6ab10e850538dba914c6d8b273cc55b8a9209b61dda16681196a35e7471da7d9a430b1c5d22877759c4b26c67a4f10ce85481b2b242ad72db2c40e9bda705509b9df34d2bf21dc19c0cb95ae02ab21a8e883331715a130e8d9661a8b213ab61f93c4844f70ac1e5bce3cdb8a", 0xff0}, {&(0x7f0000002680)="f8e6307926a010479ad4575a5c2dc4d6b8c19452caa51c61c3647db7a9ed7db43d657db27321ef4e84edcf1223d13e23ebc3cb70775ef6ebbacfc19f88e3b9f3260604212bfc5dd057af6bf3bba10da8073fbce2ef6a3f4beac382540f26e5f6db1170ca4381a7cd9b", 0x69}, {&(0x7f0000002700)="b9e9c958b3ade4a4b2601a59c7127d6efbba035551ef10447a30253bbbc071d4e84d90bf9a4faa6d49fe0ce8537f5da24386177c2f28376102ee7e37351c", 0x3e}, {&(0x7f0000002780)="ddf093ae528b7a7bca6639a2d54b243a94da09f804f581b2424fed589789c52a7f50fc254fab52a174a8adef07caab32e6d5b8617e01e161b6a551f88a8b492fc19df7a406cf0924ee0f5f40c4a8edbcee42604873c046e104d7beacf3023c1e3e98fa70df20287afbccc5ee9f9f258b25f0e022d8d49e741d5642451ca912a156c98ebde36672078251a101a5e26d3487ebe208825bf7383b6f2ed759ce68d8f10de4aec5676b3214681301d73a76b83bf3ed2cec54fa7d080390eb5c0ed7aa3e5569fc1ba62c4ad30b4582a86d701aef385b", 0xd3}, {&(0x7f0000002880)="15a859b3aaa1c2562d5ad90da09aef26f6301c3cbda12eab400d0f70efc04a1890bfa3375134f4e1d80e7c570f4c47134ed404dfcaca56813d6651eed80071cae0a7d4e2f3773905563500f9bf197a261c7a44c074", 0x55}], 0x8}}, {{&(0x7f0000002a00)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002a40), 0x0, &(0x7f0000003cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3c63}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003d80)="666f329de48203631d54791dbbbdad33f674e9ac2dd1353192fd1be71cc69ee95e1c4b0d6b7435c2ab97f636bb84565ffa75ccc210e1126b80a054b55adcf848b8c8273c6c4e36a8c8a09a569cbd99d63bbb796e7e789e8483342264a9e0a20108466bfe741e4a400ae56323be424ec758", 0x71}], 0x1, &(0x7f0000003e40)}}], 0x4, 0x1) r6 = socket$inet6(0xa, 0x7fd, 0x200000000ea47) setsockopt$inet6_udp_int(r6, 0x11, 0x100000000a, &(0x7f0000000240)=0x800000001, 0x4) [ 593.350115] vhci_write+0x2a1/0x437 [ 593.358056] __vfs_write+0x4a7/0x6b0 [ 593.358069] ? kernel_read+0x120/0x120 [ 593.358093] ? rw_verify_area+0xea/0x2b0 [ 593.366705] vfs_write+0x198/0x500 [ 593.366719] SyS_write+0xfd/0x230 [ 593.366730] ? SyS_read+0x230/0x230 [ 593.366739] ? do_syscall_64+0x53/0x640 [ 593.366748] ? SyS_read+0x230/0x230 [ 593.376399] do_syscall_64+0x1e8/0x640 [ 593.376409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.376424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 13:57:34 executing program 4 (fault-call:5 fault-nth:17): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 593.376433] RIP: 0033:0x459829 [ 593.385377] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.385388] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 593.385393] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 593.385398] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 593.385404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 593.385408] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 593.399229] Bluetooth: Can't register HCI device 13:57:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r1, 0x1f}}, 0xfffffffffffffecf) socket$l2tp(0x18, 0x1, 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3f00000000000000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x21100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e21, 0x0, 'wrr\x00', 0x4, 0x7, 0x41}, {@empty, 0x4e23, 0x2, 0x0, 0x0, 0x7ff}}, 0x44) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 13:57:35 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {0x0}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000003c0)={r2, 0x5}) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/213, 0xd5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 593.548041] device vxcan1 entered promiscuous mode [ 593.595899] FAULT_INJECTION: forcing a failure. [ 593.595899] name failslab, interval 1, probability 0, space 0, times 0 [ 593.609179] CPU: 1 PID: 23878 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 593.616291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.625630] Call Trace: [ 593.628307] dump_stack+0x138/0x19c [ 593.631936] should_fail.cold+0x10f/0x159 [ 593.636095] should_failslab+0xdb/0x130 [ 593.640068] kmem_cache_alloc_node+0x287/0x780 [ 593.644654] alloc_unbound_pwq+0x486/0xbc0 [ 593.648890] apply_wqattrs_prepare+0x355/0x960 [ 593.653482] apply_workqueue_attrs_locked+0xa7/0x120 [ 593.658580] apply_workqueue_attrs+0x31/0x50 [ 593.662991] __alloc_workqueue_key+0x78d/0xec0 [ 593.667580] ? pointer+0xb10/0xb10 [ 593.671125] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 593.676142] ? hci_register_dev+0x130/0x810 [ 593.680464] hci_register_dev+0x209/0x810 [ 593.684602] ? hci_init_sysfs+0x7c/0xa0 [ 593.688577] __vhci_create_device+0x2a6/0x560 13:57:35 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 593.693081] vhci_write+0x2a1/0x437 [ 593.696700] __vfs_write+0x4a7/0x6b0 [ 593.700408] ? kernel_read+0x120/0x120 [ 593.704300] ? rw_verify_area+0xea/0x2b0 [ 593.708358] vfs_write+0x198/0x500 [ 593.708856] RDS: rds_bind could not find a transport for 224.0.0.2, load rds_tcp or rds_rdma? [ 593.711901] SyS_write+0xfd/0x230 [ 593.711912] ? SyS_read+0x230/0x230 [ 593.711924] ? do_syscall_64+0x53/0x640 [ 593.711934] ? SyS_read+0x230/0x230 [ 593.711945] do_syscall_64+0x1e8/0x640 [ 593.711952] ? trace_hardirqs_off_thunk+0x1a/0x1c 13:57:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=ANY=[]}) [ 593.711968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 593.711984] RIP: 0033:0x459829 [ 593.752294] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.759982] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 593.767236] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 593.774489] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 593.781733] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 593.788977] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 593.836435] Bluetooth: Can't register HCI device 13:57:35 executing program 4 (fault-call:5 fault-nth:18): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:35 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x2, 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000002c0)={0x5, 0x2, {0x1, 0x3, 0x5, 0x72bb5aa45828481, 0x7}}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000400)=[@in6={0xa, 0xfffffffffffffffe, 0xed, @rand_addr="7f8c39c535d1f9685907b02810c916cf", 0xff}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f00000003c0)=0x10) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 13:57:35 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:35 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$P9_RWALK(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9b8d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="1c"], 0x1) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) [ 594.010056] FAULT_INJECTION: forcing a failure. [ 594.010056] name failslab, interval 1, probability 0, space 0, times 0 [ 594.068808] CPU: 0 PID: 23904 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 594.075963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.085320] Call Trace: [ 594.087910] dump_stack+0x138/0x19c [ 594.091550] should_fail.cold+0x10f/0x159 [ 594.095708] should_failslab+0xdb/0x130 [ 594.099685] kmem_cache_alloc+0x2d7/0x780 [ 594.103825] ? lookup_one_len+0x283/0x3a0 [ 594.107965] alloc_inode+0xa9/0x180 [ 594.111585] new_inode_pseudo+0x19/0xf0 [ 594.115546] new_inode+0x1f/0x40 [ 594.118904] debugfs_get_inode+0x1a/0x130 [ 594.123043] debugfs_create_dir+0x67/0x3b0 [ 594.127274] hci_register_dev+0x28a/0x810 [ 594.131497] ? hci_init_sysfs+0x7c/0xa0 [ 594.135478] __vhci_create_device+0x2a6/0x560 [ 594.139979] vhci_write+0x2a1/0x437 [ 594.143594] __vfs_write+0x4a7/0x6b0 [ 594.147322] ? kernel_read+0x120/0x120 [ 594.151213] ? rw_verify_area+0xea/0x2b0 [ 594.155264] vfs_write+0x198/0x500 [ 594.158801] SyS_write+0xfd/0x230 [ 594.162246] ? SyS_read+0x230/0x230 [ 594.165891] ? do_syscall_64+0x53/0x640 [ 594.169856] ? SyS_read+0x230/0x230 [ 594.173486] do_syscall_64+0x1e8/0x640 [ 594.177365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.182210] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.187393] RIP: 0033:0x459829 [ 594.190572] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.198272] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 594.205527] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 13:57:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:35 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 594.212810] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 594.220069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 594.227329] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:35 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2040) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000380)={0x0, 0x6, 0x5, &(0x7f0000000340)}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3, 0x2, 0x3ff, 0x1ac1, 0x0, 0x4, 0x84000, 0x8, 0x0, 0x81, 0x0, 0x2, 0x86e, 0x7ff, 0x6, 0x38000, 0x101, 0x3, 0xfffffffffffff057, 0x2, 0x1, 0x5, 0x5, 0x3e9, 0x9, 0x6, 0xfffffffffffffff9, 0x81, 0x8, 0x2, 0x1f, 0x6, 0x4c63, 0xff, 0x9, 0x0, 0x0, 0x7, 0x4685d1d46a115261, @perf_config_ext={0x1ff, 0x5}, 0x10000, 0x81, 0x20, 0x0, 0x5, 0x2, 0x1f}, r3, 0x5, r2, 0x8) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 594.263840] kobject_add_internal failed for hci1 (error: -2 parent: bluetooth) [ 594.292999] Bluetooth: Can't register HCI device 13:57:35 executing program 4 (fault-call:5 fault-nth:19): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:35 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@dev, @in6=@local}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000009c0)=0xe8) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) stat(&(0x7f0000001940)='.\x00', &(0x7f0000001980)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001a00)) fstat(0xffffffffffffffff, 0x0) fallocate(r0, 0x10, 0x5, 0x10fffe) 13:57:35 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000440)=""/180, 0xb4, 0x0, &(0x7f0000000500)) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000540)={0x0, 0x3, 0x0, 0xe0}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000580)=""/115) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e617400000000fb000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000004000"/72], 0x48) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010811}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) [ 594.469467] FAULT_INJECTION: forcing a failure. [ 594.469467] name failslab, interval 1, probability 0, space 0, times 0 [ 594.522768] CPU: 0 PID: 23934 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 594.530201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.530206] Call Trace: [ 594.530227] dump_stack+0x138/0x19c [ 594.530247] should_fail.cold+0x10f/0x159 [ 594.530265] should_failslab+0xdb/0x130 [ 594.530279] kmem_cache_alloc+0x2d7/0x780 [ 594.530295] ? selinux_inode_alloc_security+0x13/0x2a0 [ 594.549962] selinux_inode_alloc_security+0xb6/0x2a0 [ 594.549976] security_inode_alloc+0x94/0xd0 [ 594.549990] inode_init_always+0x552/0xaf0 [ 594.576951] alloc_inode+0x81/0x180 [ 594.580581] new_inode_pseudo+0x19/0xf0 [ 594.584550] new_inode+0x1f/0x40 [ 594.587916] debugfs_get_inode+0x1a/0x130 [ 594.592079] debugfs_create_dir+0x67/0x3b0 [ 594.596315] hci_register_dev+0x28a/0x810 [ 594.600458] ? hci_init_sysfs+0x7c/0xa0 [ 594.604429] __vhci_create_device+0x2a6/0x560 [ 594.608915] vhci_write+0x2a1/0x437 [ 594.612539] __vfs_write+0x4a7/0x6b0 [ 594.616246] ? kernel_read+0x120/0x120 13:57:36 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2040) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000380)={0x0, 0x6, 0x5, &(0x7f0000000340)}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3, 0x2, 0x3ff, 0x1ac1, 0x0, 0x4, 0x84000, 0x8, 0x0, 0x81, 0x0, 0x2, 0x86e, 0x7ff, 0x6, 0x38000, 0x101, 0x3, 0xfffffffffffff057, 0x2, 0x1, 0x5, 0x5, 0x3e9, 0x9, 0x6, 0xfffffffffffffff9, 0x81, 0x8, 0x2, 0x1f, 0x6, 0x4c63, 0xff, 0x9, 0x0, 0x0, 0x7, 0x4685d1d46a115261, @perf_config_ext={0x1ff, 0x5}, 0x10000, 0x81, 0x20, 0x0, 0x5, 0x2, 0x1f}, r3, 0x5, r2, 0x8) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 594.620135] ? rw_verify_area+0xea/0x2b0 [ 594.624187] vfs_write+0x198/0x500 [ 594.627722] SyS_write+0xfd/0x230 [ 594.631195] ? SyS_read+0x230/0x230 [ 594.634812] ? do_syscall_64+0x53/0x640 [ 594.638781] ? SyS_read+0x230/0x230 [ 594.642404] do_syscall_64+0x1e8/0x640 [ 594.646282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.651141] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.656319] RIP: 0033:0x459829 [ 594.659496] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 13:57:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x625cff12e9a2d345, 0x5053fbf7, 0x80, [], &(0x7f0000000080)={0xa20920, 0x5, [], @ptr=0x2}}) [ 594.667199] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 594.674461] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 594.681726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 594.688986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 594.696249] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:36 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:36 executing program 2: write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) msgget$private(0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) io_setup(0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) mlockall(0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x8000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81401}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000008", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25050000000800060004000200"], 0x1c}, 0x1, 0x0, 0x0, 0x4044004}, 0xc081) poll(&(0x7f0000000040)=[{r3}], 0x1, 0xe0) dup2(r1, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'hsr0\x00', &(0x7f0000000080)=ANY=[]}) 13:57:36 executing program 4 (fault-call:5 fault-nth:20): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 595.215788] FAULT_INJECTION: forcing a failure. [ 595.215788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:57:36 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 595.274231] CPU: 0 PID: 23959 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 595.281516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.290873] Call Trace: [ 595.293465] dump_stack+0x138/0x19c [ 595.297104] should_fail.cold+0x10f/0x159 [ 595.301270] ? __might_sleep+0x93/0xb0 [ 595.305153] __alloc_pages_nodemask+0x1d6/0x7a0 [ 595.309849] ? __alloc_pages_slowpath+0x2930/0x2930 [ 595.314865] ? lock_downgrade+0x6e0/0x6e0 [ 595.319009] alloc_pages_current+0xec/0x1e0 13:57:36 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2040) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000380)={0x0, 0x6, 0x5, &(0x7f0000000340)}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3, 0x2, 0x3ff, 0x1ac1, 0x0, 0x4, 0x84000, 0x8, 0x0, 0x81, 0x0, 0x2, 0x86e, 0x7ff, 0x6, 0x38000, 0x101, 0x3, 0xfffffffffffff057, 0x2, 0x1, 0x5, 0x5, 0x3e9, 0x9, 0x6, 0xfffffffffffffff9, 0x81, 0x8, 0x2, 0x1f, 0x6, 0x4c63, 0xff, 0x9, 0x0, 0x0, 0x7, 0x4685d1d46a115261, @perf_config_ext={0x1ff, 0x5}, 0x10000, 0x81, 0x20, 0x0, 0x5, 0x2, 0x1f}, r3, 0x5, r2, 0x8) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 595.323332] __get_free_pages+0xf/0x40 [ 595.327232] inode_doinit_with_dentry+0x82b/0xed0 [ 595.332085] ? selinux_msg_queue_msgsnd+0x400/0x400 [ 595.337100] ? timespec_trunc+0xb5/0x120 [ 595.341154] selinux_d_instantiate+0x28/0x40 [ 595.345555] security_d_instantiate+0x5a/0xe0 [ 595.350047] d_instantiate+0x60/0xa0 [ 595.353768] debugfs_create_dir+0x10f/0x3b0 [ 595.358105] hci_register_dev+0x28a/0x810 [ 595.362261] ? hci_init_sysfs+0x7c/0xa0 [ 595.366233] __vhci_create_device+0x2a6/0x560 [ 595.370726] vhci_write+0x2a1/0x437 [ 595.374352] __vfs_write+0x4a7/0x6b0 [ 595.378089] ? kernel_read+0x120/0x120 [ 595.382098] ? rw_verify_area+0xea/0x2b0 [ 595.386156] vfs_write+0x198/0x500 [ 595.389690] SyS_write+0xfd/0x230 [ 595.393138] ? SyS_read+0x230/0x230 [ 595.396772] ? do_syscall_64+0x53/0x640 [ 595.400745] ? SyS_read+0x230/0x230 [ 595.404373] do_syscall_64+0x1e8/0x640 [ 595.408249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.414617] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 595.419801] RIP: 0033:0x459829 [ 595.422980] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 595.430682] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 595.438032] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 595.445303] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.452561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 595.459828] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 595.468486] protocol 88fb is buggy, dev hsr_slave_0 13:57:36 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@dev, @in6=@local}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000009c0)=0xe8) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) stat(&(0x7f0000001940)='.\x00', &(0x7f0000001980)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001a00)) fstat(0xffffffffffffffff, 0x0) fallocate(r0, 0x10, 0x5, 0x10fffe) [ 595.474217] protocol 88fb is buggy, dev hsr_slave_1 [ 595.520153] protocol 88fb is buggy, dev hsr_slave_0 [ 595.525288] protocol 88fb is buggy, dev hsr_slave_1 13:57:37 executing program 4 (fault-call:5 fault-nth:21): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:37 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0x4, 0x1, 0x3f, 0x81, 0x6}, {0x0, 0x3, 0x6, 0x4, 0x4}]}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 595.772035] FAULT_INJECTION: forcing a failure. [ 595.772035] name failslab, interval 1, probability 0, space 0, times 0 [ 595.828714] CPU: 1 PID: 23988 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 595.835863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.845220] Call Trace: [ 595.847816] dump_stack+0x138/0x19c [ 595.851457] should_fail.cold+0x10f/0x159 [ 595.855611] should_failslab+0xdb/0x130 [ 595.859615] __kmalloc_track_caller+0x2ec/0x790 [ 595.864290] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 595.869056] ? kstrdup_const+0x48/0x60 [ 595.872944] kstrdup+0x3a/0x70 13:57:37 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2040) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000380)={0x0, 0x6, 0x5, &(0x7f0000000340)}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3, 0x2, 0x3ff, 0x1ac1, 0x0, 0x4, 0x84000, 0x8, 0x0, 0x81, 0x0, 0x2, 0x86e, 0x7ff, 0x6, 0x38000, 0x101, 0x3, 0xfffffffffffff057, 0x2, 0x1, 0x5, 0x5, 0x3e9, 0x9, 0x6, 0xfffffffffffffff9, 0x81, 0x8, 0x2, 0x1f, 0x6, 0x4c63, 0xff, 0x9, 0x0, 0x0, 0x7, 0x4685d1d46a115261, @perf_config_ext={0x1ff, 0x5}, 0x10000, 0x81, 0x20, 0x0, 0x5, 0x2, 0x1f}, r3, 0x5, r2, 0x8) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:37 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 595.876138] kstrdup_const+0x48/0x60 [ 595.879855] kvasprintf_const+0xf7/0x170 [ 595.883916] kobject_set_name_vargs+0x5b/0x150 [ 595.888496] dev_set_name+0xa4/0xc0 [ 595.892119] ? device_initialize+0x430/0x430 [ 595.896519] ? up_write+0x1a/0x60 [ 595.896538] hci_register_dev+0x2d1/0x810 [ 595.904094] ? hci_init_sysfs+0x7c/0xa0 [ 595.904110] __vhci_create_device+0x2a6/0x560 [ 595.904123] vhci_write+0x2a1/0x437 [ 595.904136] __vfs_write+0x4a7/0x6b0 [ 595.904148] ? kernel_read+0x120/0x120 [ 595.904168] ? rw_verify_area+0xea/0x2b0 [ 595.904180] vfs_write+0x198/0x500 [ 595.904190] SyS_write+0xfd/0x230 [ 595.904199] ? SyS_read+0x230/0x230 [ 595.904209] ? do_syscall_64+0x53/0x640 [ 595.904217] ? SyS_read+0x230/0x230 [ 595.904227] do_syscall_64+0x1e8/0x640 [ 595.904235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.904251] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 595.912685] RIP: 0033:0x459829 [ 595.912690] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 13:57:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000900)=0xb, 0x12) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x10, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x10001}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@fowner_eq={'fowner', 0x3d, r5}}, {@pcr={'pcr', 0x3d, 0x7ff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'hwsim0\x00'}}, {@dont_measure='dont_measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x62, 0x34, 0x0, 0x35, 0x38, 0x0, 0x38], 0x2d, [0x65, 0x77, 0x39, 0x64], 0x2d, [0x34, 0x33, 0x62, 0x65], 0x2d, [0x38, 0x37, 0x37, 0x33], 0x2d, [0x64, 0x62, 0x36, 0x36, 0x33, 0x38, 0x31, 0x66]}}}, {@fowner_gt={'fowner>', r6}}, {@smackfsdef={'smackfsdef', 0x3d, '(wlan1.[keyring.bdevsecurity'}}, {@fowner_lt={'fowner<', r7}}]}}) wait4(r3, &(0x7f0000000500), 0x1000000, &(0x7f0000000840)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'hwsim0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='?']}) 13:57:37 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x41f, &(0x7f0000000200)=[{}, {}, {}]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) tee(r3, r2, 0x3, 0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 595.912700] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 595.912706] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 595.912711] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 595.912716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 595.912721] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:37 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 596.158799] Bluetooth: Can't register HCI device 13:57:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:37 executing program 4 (fault-call:5 fault-nth:22): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:37 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'rose0\x00', &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x109100, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x2, 0xa3b1, 0x10001, 0x4ade3d5, 0x5, 0x4}) [ 596.364978] FAULT_INJECTION: forcing a failure. [ 596.364978] name failslab, interval 1, probability 0, space 0, times 0 [ 596.399720] CPU: 1 PID: 24016 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 596.406893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.416236] Call Trace: [ 596.416255] dump_stack+0x138/0x19c [ 596.416273] should_fail.cold+0x10f/0x159 [ 596.416290] should_failslab+0xdb/0x130 [ 596.416303] kmem_cache_alloc+0x2d7/0x780 [ 596.416315] ? memcpy+0x46/0x50 [ 596.438019] ? kstrdup+0x5a/0x70 [ 596.441382] __kernfs_new_node+0x70/0x420 [ 596.441393] ? vprintk_func+0x65/0x159 [ 596.441401] kernfs_new_node+0x80/0xf0 [ 596.441410] kernfs_create_dir_ns+0x41/0x140 [ 596.441419] sysfs_create_dir_ns+0xbe/0x1d0 [ 596.441429] kobject_add_internal.part.0.cold+0x114/0x5ae [ 596.441439] kobject_add+0x11f/0x180 [ 596.449447] ? kset_create_and_add+0x180/0x180 [ 596.449463] ? mutex_unlock+0xd/0x10 [ 596.449475] device_add+0x383/0x1490 [ 596.449486] ? device_initialize+0x430/0x430 [ 596.449496] ? device_private_init+0x190/0x190 [ 596.449514] hci_register_dev+0x2d9/0x810 [ 596.496470] __vhci_create_device+0x2a6/0x560 [ 596.500980] vhci_write+0x2a1/0x437 [ 596.504630] __vfs_write+0x4a7/0x6b0 [ 596.508355] ? kernel_read+0x120/0x120 [ 596.512259] ? rw_verify_area+0xea/0x2b0 [ 596.516337] vfs_write+0x198/0x500 [ 596.519890] SyS_write+0xfd/0x230 [ 596.523336] ? SyS_read+0x230/0x230 [ 596.526958] ? do_syscall_64+0x53/0x640 [ 596.530938] ? SyS_read+0x230/0x230 [ 596.534576] do_syscall_64+0x1e8/0x640 [ 596.538465] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.543551] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 596.548739] RIP: 0033:0x459829 [ 596.551914] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.559604] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 596.566857] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 596.574107] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 596.581356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 596.588608] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:38 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@dev, @in6=@local}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000009c0)=0xe8) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) stat(&(0x7f0000001940)='.\x00', &(0x7f0000001980)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001a00)) fstat(0xffffffffffffffff, 0x0) fallocate(r0, 0x10, 0x5, 0x10fffe) 13:57:38 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000340)) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020001020900000028bd7000ffdbdf25020001000000049405902f040100004005001a00ff010000000000000000000000b5736cb77e639cff0000000000bb090004040000000000"], 0x48}}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0xf3, "d974cf7037550e402387319c5cb1f6bf9ff52777b0f05d77333cc18f6a9605f9f015bf8b11a17386c10ea6fcb5094155a0bb214b01fe1ca46b168e583237130d5bae56a2c0874072f465539066d62945df5cea35a34949b038ce9d6656e45e6b0a5f4061042dfea5982a8030d117cd2305c1360896e095052bffde1d8bf155a56548f5d18ef2f5d5741ca9b5c8a5daf8bebd0364fdcd18b16a5c2a6916bf80b47a1037c8cbd99013939ab05b0b0a08f9f73461d130b637430fc83c9784e5211d28d30614ad7b16fb9c6914f1d49d08380a777575c01a52f4d1a225269aa790fc67fa15fd36f85f4f88838721f026c15054fb05"}, &(0x7f00000004c0)=0xfb) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000500)={0x9, 0xf, 0x9, 0x34c, r2}, 0x10) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0x10) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYRESHEX=r0]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x0, r2}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) 13:57:38 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:38 executing program 4 (fault-call:5 fault-nth:23): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 596.611053] kobject_add_internal failed for hci1 (error: -12 parent: bluetooth) [ 596.619241] Bluetooth: Can't register HCI device [ 596.726287] FAULT_INJECTION: forcing a failure. [ 596.726287] name failslab, interval 1, probability 0, space 0, times 0 [ 596.738913] CPU: 0 PID: 24038 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 596.746028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.755379] Call Trace: [ 596.757967] dump_stack+0x138/0x19c [ 596.761654] should_fail.cold+0x10f/0x159 [ 596.765808] ? should_failslab+0xa1/0x130 [ 596.769957] should_failslab+0xdb/0x130 [ 596.773944] kmem_cache_alloc+0x47/0x780 [ 596.778009] ? save_stack_trace+0x16/0x20 [ 596.782145] ? save_stack+0x45/0xd0 [ 596.782152] ? kasan_kmalloc+0xce/0xf0 [ 596.782159] ? kasan_slab_alloc+0xf/0x20 [ 596.782168] ? kmem_cache_alloc+0x12e/0x780 [ 596.782183] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 596.782193] idr_get_free_cmn+0x563/0x8d0 [ 596.782209] idr_alloc_cmn+0x10e/0x210 [ 596.782218] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 596.782231] ? __lock_is_held+0xb6/0x140 [ 596.782241] ? check_preemption_disabled+0x3c/0x250 [ 596.782253] idr_alloc_cyclic+0xd0/0x1e2 [ 596.782264] ? ida_simple_remove+0x60/0x60 [ 596.782278] __kernfs_new_node+0xe4/0x420 [ 596.782291] kernfs_new_node+0x80/0xf0 [ 596.782306] kernfs_create_link+0x2c/0x170 [ 596.793834] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 596.793846] sysfs_create_link+0x65/0xc0 [ 596.793857] device_add+0x447/0x1490 [ 596.793870] ? device_private_init+0x190/0x190 [ 596.807919] hci_register_dev+0x2d9/0x810 [ 596.807937] __vhci_create_device+0x2a6/0x560 [ 596.807950] vhci_write+0x2a1/0x437 [ 596.807963] __vfs_write+0x4a7/0x6b0 [ 596.807976] ? kernel_read+0x120/0x120 [ 596.807999] ? rw_verify_area+0xea/0x2b0 [ 596.834000] vfs_write+0x198/0x500 [ 596.834014] SyS_write+0xfd/0x230 [ 596.834025] ? SyS_read+0x230/0x230 [ 596.834039] ? do_syscall_64+0x53/0x640 [ 596.902101] ? SyS_read+0x230/0x230 [ 596.905709] do_syscall_64+0x1e8/0x640 [ 596.909595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.914620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 596.919814] RIP: 0033:0x459829 13:57:38 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000200)='/keyringbdev\x00'}, 0x30) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) mq_unlink(&(0x7f0000000100)='em1vboxnet1.-&\x00') ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) read$eventfd(r1, &(0x7f00000000c0), 0x8) [ 596.922987] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.930680] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 596.937946] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 596.945292] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 596.952542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 596.959789] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:38 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="ce33b6796c2450428ac1fbc394d8c5f9", 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = getuid() sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newpolicy={0xec, 0x13, 0x100, 0x70bd25, 0x25dfdbfd, {{@in=@local, @in=@empty, 0x4e23, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0xb0cb116b08ea2087, 0x5c, r2, r3}, {0x9, 0x3, 0x2, 0x7ff, 0x10000, 0xffffffff7fffffff, 0x8, 0x10000}, {0x9, 0x9, 0x9, 0x401}, 0x3, 0x6e6bb7, 0x2, 0x1, 0x4d097d7bc57f20d9, 0x2}, [@tfcpad={0x8, 0x16, 0x1}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd28, 0x70bd28, 0x70bd27, 0x70bd27, 0xffffffff, [0xbed, 0x5, 0x9, 0x7c2c4510]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4810}, 0x1) 13:57:38 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x41f, &(0x7f0000000200)=[{}, {}, {}]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) tee(r3, r2, 0x3, 0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="fe45a7b88d3c07280efe96843dd0b6f3de548af833210fba48104e28349a00a9001100000000000000"]}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:57:38 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x2b7, &(0x7f0000000240)=[{}, {}, {}]}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000001c0)=0x100000001) io_setup(0xd652, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f00000002c0)="72cd46debe15c28232571de794becdc3a23c70a221e340f62090e7414f07b0f5e662ccbaa558c1bdedd0740a06b186292cc8f9f52c906f3273c23007711953d943bae57ad3d0605036bea32116d2d9fabb734a813201aade11861f839753350a7bcbefd912b3a4d5c80817c7b6e9a98a5920a34dbed706ba5569b40749ccc9710af2d7f844acd1f91bed6448d3ea3e0c130dfdb6812f32cf2a46d0f6c8ace7ab2efb50047dfa341e813f71a5822ed5b54932840bc6b8254fb7ffad55fa6e0483c38c", 0xc2, 0x9, 0x0, 0x2, r1}, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000480)) write$selinux_context(r1, &(0x7f0000000440)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25) 13:57:39 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="ce33b6796c2450428ac1fbc394d8c5f9", 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) shutdown(r0, 0x0) 13:57:39 executing program 4 (fault-call:5 fault-nth:24): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:39 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x41f, &(0x7f0000000200)=[{}, {}, {}]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) tee(r3, r2, 0x3, 0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:39 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 597.684306] FAULT_INJECTION: forcing a failure. [ 597.684306] name failslab, interval 1, probability 0, space 0, times 0 [ 597.705600] CPU: 0 PID: 24083 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 597.712738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.722089] Call Trace: [ 597.722110] dump_stack+0x138/0x19c [ 597.722129] should_fail.cold+0x10f/0x159 [ 597.722147] should_failslab+0xdb/0x130 [ 597.722158] kmem_cache_alloc+0x2d7/0x780 [ 597.722166] ? memcpy+0x46/0x50 [ 597.722180] ? kstrdup+0x5a/0x70 [ 597.722193] __kernfs_new_node+0x70/0x420 [ 597.722208] kernfs_new_node+0x80/0xf0 [ 597.722220] kernfs_create_link+0x2c/0x170 [ 597.722231] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 597.722242] sysfs_create_link+0x65/0xc0 [ 597.722253] device_add+0x735/0x1490 [ 597.722267] ? device_private_init+0x190/0x190 [ 597.722283] hci_register_dev+0x2d9/0x810 [ 597.722291] ? hci_init_sysfs+0x7c/0xa0 [ 597.722307] __vhci_create_device+0x2a6/0x560 [ 597.722320] vhci_write+0x2a1/0x437 [ 597.722332] __vfs_write+0x4a7/0x6b0 [ 597.722345] ? kernel_read+0x120/0x120 [ 597.722368] ? rw_verify_area+0xea/0x2b0 [ 597.722380] vfs_write+0x198/0x500 [ 597.722394] SyS_write+0xfd/0x230 [ 597.759632] ? SyS_read+0x230/0x230 [ 597.759643] ? do_syscall_64+0x53/0x640 [ 597.759653] ? SyS_read+0x230/0x230 [ 597.759662] do_syscall_64+0x1e8/0x640 [ 597.759675] ? trace_hardirqs_off_thunk+0x1a/0x1c 13:57:39 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x1}, 0x8, 0x5, 0x10001}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'\x00', &(0x7f0000000100)=ANY=[]}) [ 597.785325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 597.785334] RIP: 0033:0x459829 [ 597.785339] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.785350] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 597.785355] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 597.785365] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 597.797141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 13:57:39 executing program 4 (fault-call:5 fault-nth:25): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 597.797147] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 597.839480] Bluetooth: Can't register HCI device 13:57:39 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="ce33b6796c2450428ac1fbc394d8c5f9", 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x10001, 0x6, 0x1, 0x976e}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="10c329476d0d25b15dc3fa4561a05c79a3f33b866ea594bf83be33a885dfbf97c7db9d11422b499e2e5ef4cc738925ae6368440d339b7cdcd6a97ea32761342accbac97eb3d3fd01b2db360b9c256b0a02a9eae9ced4bac1017a7590cafb731b7f9676eab5ba4f653c5c8a856878e4075ca1ea35"]}) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) [ 598.005659] FAULT_INJECTION: forcing a failure. [ 598.005659] name failslab, interval 1, probability 0, space 0, times 0 [ 598.026050] CPU: 1 PID: 24102 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 598.033194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.042543] Call Trace: [ 598.042562] dump_stack+0x138/0x19c [ 598.042583] should_fail.cold+0x10f/0x159 [ 598.052905] should_failslab+0xdb/0x130 [ 598.056878] kmem_cache_alloc+0x2d7/0x780 [ 598.061023] __kernfs_new_node+0x70/0x420 [ 598.061036] kernfs_new_node+0x80/0xf0 [ 598.061047] kernfs_create_dir_ns+0x41/0x140 [ 598.061058] internal_create_group+0xea/0x7b0 [ 598.077965] ? check_preemption_disabled+0x3c/0x250 [ 598.082981] ? retint_kernel+0x2d/0x2d [ 598.086873] sysfs_create_group+0x20/0x30 [ 598.091021] dpm_sysfs_add+0x26/0x1b0 [ 598.094826] device_add+0x968/0x1490 [ 598.098549] ? device_private_init+0x190/0x190 13:57:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = dup3(r0, r0, 0x150654e0e7505f64) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x10000, 0x1, 0x2000}, 0x4) r2 = dup2(r0, r0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000080)={0xff, 0x5, 0x8, 0x9}) [ 598.103130] hci_register_dev+0x2d9/0x810 [ 598.107255] ? hci_init_sysfs+0x7c/0xa0 [ 598.111218] __vhci_create_device+0x2a6/0x560 [ 598.115717] vhci_write+0x2a1/0x437 [ 598.119344] __vfs_write+0x4a7/0x6b0 [ 598.123056] ? kernel_read+0x120/0x120 [ 598.126949] ? retint_kernel+0x2d/0x2d [ 598.130837] ? vfs_write+0x11b/0x500 [ 598.130849] vfs_write+0x198/0x500 [ 598.130860] SyS_write+0xfd/0x230 [ 598.130870] ? SyS_read+0x230/0x230 [ 598.138102] ? do_syscall_64+0x53/0x640 [ 598.138111] ? SyS_read+0x230/0x230 [ 598.152721] do_syscall_64+0x1e8/0x640 13:57:39 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="ce33b6796c2450428ac1fbc394d8c5f9", 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:39 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="ce33b6796c2450428ac1fbc394d8c5f9", 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 598.156603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 598.161444] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 598.166634] RIP: 0033:0x459829 [ 598.169965] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.177794] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 598.185062] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 598.192337] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 598.199604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 13:57:39 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x41f, &(0x7f0000000200)=[{}, {}, {}]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) tee(r3, r2, 0x3, 0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:39 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:39 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="ce33b6796c2450428ac1fbc394d8c5f9", 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 598.206864] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:39 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) [ 598.269230] Bluetooth: Can't register HCI device 13:57:40 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:40 executing program 4 (fault-call:5 fault-nth:26): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:40 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="ce33b6796c2450428ac1fbc394d8c5f9", 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='X']}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000180)) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000000c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000200)={0x0, 0x1, {0x24, 0x7, 0x16, 0x1f, 0x5, 0x8, 0x0, 0xd2, 0xffffffffffffffff}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000001c0)) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000240)) 13:57:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r5 = fcntl$getown(r4, 0x9) perf_event_open(&(0x7f00000002c0)={0x7dfb77043f0fc6a8, 0x70, 0x8, 0xc23, 0x0, 0x3c, 0x0, 0x7, 0xa0040, 0x4, 0x40, 0x6, 0x7, 0x4, 0x5, 0x403, 0x6, 0x101, 0xffffffffffff8000, 0x203, 0x200000000004, 0x9, 0x3, 0xffffffff, 0x1, 0x4b, 0x2, 0x100000000ba, 0x8, 0xfff, 0x5, 0x812, 0x6, 0x7, 0x200, 0x3, 0x7, 0x8, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x4, 0x400008, 0x1ff, 0x4, 0x3, 0x5, 0x4000000000000000}, r5, 0xe, 0xffffffffffffffff, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x40) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:40 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:40 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}) [ 598.781259] FAULT_INJECTION: forcing a failure. [ 598.781259] name failslab, interval 1, probability 0, space 0, times 0 [ 598.800676] CPU: 1 PID: 24140 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 598.807831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.817191] Call Trace: [ 598.819788] dump_stack+0x138/0x19c [ 598.823423] should_fail.cold+0x10f/0x159 [ 598.823442] should_failslab+0xdb/0x130 [ 598.823457] kmem_cache_alloc+0x2d7/0x780 [ 598.823468] ? kernfs_find_and_get_ns+0x4b/0x60 [ 598.823484] __kernfs_new_node+0x70/0x420 [ 598.823502] ? lock_downgrade+0x6e0/0x6e0 [ 598.831600] kernfs_new_node+0x80/0xf0 [ 598.831612] __kernfs_create_file+0x46/0x323 [ 598.831621] sysfs_add_file_mode_ns+0x1e4/0x450 [ 598.831633] sysfs_add_file+0x4f/0x60 [ 598.831641] sysfs_merge_group+0xe2/0x210 [ 598.831652] dpm_sysfs_add+0x121/0x1b0 [ 598.831661] device_add+0x968/0x1490 [ 598.831672] ? device_private_init+0x190/0x190 [ 598.831687] hci_register_dev+0x2d9/0x810 [ 598.831702] __vhci_create_device+0x2a6/0x560 [ 598.831711] vhci_write+0x2a1/0x437 [ 598.831723] __vfs_write+0x4a7/0x6b0 [ 598.831733] ? kernel_read+0x120/0x120 [ 598.831751] ? rw_verify_area+0xea/0x2b0 [ 598.831762] vfs_write+0x198/0x500 [ 598.831773] SyS_write+0xfd/0x230 [ 598.831784] ? SyS_read+0x230/0x230 [ 598.844717] ? do_syscall_64+0x53/0x640 [ 598.844730] ? SyS_read+0x230/0x230 [ 598.844739] do_syscall_64+0x1e8/0x640 13:57:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="ab13df1bc67d429819ea6f9d01ac"]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bcsf0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) bind(r1, &(0x7f0000000140)=@caif=@dbg={0x25, 0x3, 0x6}, 0x80) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f00000001c0)=@default) [ 598.844746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 598.844761] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 598.844768] RIP: 0033:0x459829 [ 598.844773] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.861837] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 598.861843] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 598.861848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 598.861854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 13:57:40 executing program 4 (fault-call:5 fault-nth:27): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:40 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 598.861858] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 598.897231] Bluetooth: Can't register HCI device 13:57:40 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 599.082438] FAULT_INJECTION: forcing a failure. [ 599.082438] name failslab, interval 1, probability 0, space 0, times 0 [ 599.110267] CPU: 0 PID: 24163 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 599.117443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.117455] Call Trace: [ 599.129450] dump_stack+0x138/0x19c [ 599.133092] should_fail.cold+0x10f/0x159 [ 599.133109] should_failslab+0xdb/0x130 [ 599.133121] kmem_cache_alloc+0x2d7/0x780 [ 599.133128] ? memcpy+0x46/0x50 [ 599.133139] ? kstrdup+0x5a/0x70 [ 599.133166] __kernfs_new_node+0x70/0x420 [ 599.141378] kernfs_new_node+0x80/0xf0 [ 599.141389] kernfs_create_link+0x2c/0x170 [ 599.141398] sysfs_do_create_link_sd.isra.0+0x90/0x120 [ 599.141405] sysfs_create_link+0x65/0xc0 [ 599.141413] device_add+0x735/0x1490 [ 599.141424] ? device_private_init+0x190/0x190 [ 599.141439] hci_register_dev+0x2d9/0x810 [ 599.141454] __vhci_create_device+0x2a6/0x560 [ 599.141466] vhci_write+0x2a1/0x437 [ 599.156344] __vfs_write+0x4a7/0x6b0 [ 599.156359] ? kernel_read+0x120/0x120 [ 599.156379] ? vfs_write+0x11b/0x500 [ 599.164477] vfs_write+0x198/0x500 [ 599.164490] SyS_write+0xfd/0x230 [ 599.164502] ? SyS_read+0x230/0x230 [ 599.164512] ? do_syscall_64+0x53/0x640 [ 599.164522] ? SyS_read+0x230/0x230 [ 599.173821] do_syscall_64+0x1e8/0x640 [ 599.173830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 599.173847] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 599.173855] RIP: 0033:0x459829 [ 599.173860] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.173870] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 599.173876] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 599.173881] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 599.173886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 599.173891] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 599.217636] Bluetooth: Can't register HCI device 13:57:41 executing program 3: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:41 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:41 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:41 executing program 4 (fault-call:5 fault-nth:28): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:41 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x402, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7fffffffe) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1, @dev}, &(0x7f0000000340)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={r5, @rand_addr=0x5, @remote}, 0xc) close(r4) syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x800, 0x210000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]}) 13:57:41 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000440)=""/180, 0xb4, 0x0, &(0x7f0000000500)) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000540)={0x0, 0x3, 0x0, 0xe0}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000580)=""/115) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e617400000000fb000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000004000"/72], 0x48) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010811}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) [ 599.627323] FAULT_INJECTION: forcing a failure. [ 599.627323] name failslab, interval 1, probability 0, space 0, times 0 [ 599.672273] CPU: 1 PID: 24182 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 599.679425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.688864] Call Trace: [ 599.688883] dump_stack+0x138/0x19c [ 599.688900] should_fail.cold+0x10f/0x159 [ 599.700189] should_failslab+0xdb/0x130 [ 599.704159] kmem_cache_alloc+0x2d7/0x780 [ 599.704172] ? wait_for_completion+0x420/0x420 [ 599.704190] __kernfs_new_node+0x70/0x420 [ 599.704206] kernfs_new_node+0x80/0xf0 [ 599.712908] __kernfs_create_file+0x46/0x323 [ 599.712921] sysfs_add_file_mode_ns+0x1e4/0x450 [ 599.712931] sysfs_add_file+0x4f/0x60 [ 599.712940] sysfs_merge_group+0xe2/0x210 [ 599.712953] dpm_sysfs_add+0x121/0x1b0 [ 599.712965] device_add+0x968/0x1490 [ 599.725402] ? device_private_init+0x190/0x190 [ 599.725416] ? kobject_set_name_vargs+0x101/0x150 [ 599.725432] hci_register_dev+0x2d9/0x810 [ 599.725449] __vhci_create_device+0x2a6/0x560 [ 599.725460] vhci_write+0x2a1/0x437 [ 599.725473] __vfs_write+0x4a7/0x6b0 13:57:41 executing program 3: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 599.725486] ? kernel_read+0x120/0x120 [ 599.725508] ? rw_verify_area+0xea/0x2b0 [ 599.725519] vfs_write+0x198/0x500 [ 599.745677] SyS_write+0xfd/0x230 [ 599.745689] ? SyS_read+0x230/0x230 [ 599.745701] ? do_syscall_64+0x53/0x640 [ 599.745711] ? SyS_read+0x230/0x230 [ 599.745722] do_syscall_64+0x1e8/0x640 [ 599.745729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 599.745743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 599.782576] RIP: 0033:0x459829 13:57:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:41 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000440)=""/180, 0xb4, 0x0, &(0x7f0000000500)) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000540)={0x0, 0x3, 0x0, 0xe0}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000580)=""/115) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e617400000000fb000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000004000"/72], 0x48) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010811}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 13:57:41 executing program 3: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 599.782583] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.782594] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 599.782599] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 599.782605] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 599.782610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 599.782615] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x680}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffff5459}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5e27}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0ba4037faec5"]}) [ 599.894552] Bluetooth: Can't register HCI device 13:57:41 executing program 4 (fault-call:5 fault-nth:29): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:41 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000200)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000002c0)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:41 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000440)=""/180, 0xb4, 0x0, &(0x7f0000000500)) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000540)={0x0, 0x3, 0x0, 0xe0}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000580)=""/115) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e617400000000fb000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000004000"/72], 0x48) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010811}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 13:57:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="905f8a49605898c590091d53c73fb6d3e12a1f6bc086e7e1884967a321027316b1f2825764db41c5d7e72d5fe307dad1522168ae6bd32bf43a2b1890f7d0e489a84d87fa36ab8f7f005958b7f3ab63f58bce1b93abb7232a6ed7b1e9d8e3c640cc6fcf36ffc520000000000000000000df0000000000"]}) 13:57:41 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, 0x0, 0x0) 13:57:41 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xfffffffffffffe1d) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 600.067226] FAULT_INJECTION: forcing a failure. [ 600.067226] name failslab, interval 1, probability 0, space 0, times 0 [ 600.107667] CPU: 1 PID: 24211 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 600.114823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.124185] Call Trace: [ 600.126772] dump_stack+0x138/0x19c [ 600.130401] should_fail.cold+0x10f/0x159 [ 600.130419] should_failslab+0xdb/0x130 [ 600.130433] kmem_cache_alloc+0x2d7/0x780 [ 600.130445] ? kernfs_find_and_get_ns+0x4b/0x60 [ 600.130478] __kernfs_new_node+0x70/0x420 [ 600.151620] ? lock_downgrade+0x6e0/0x6e0 [ 600.155862] kernfs_new_node+0x80/0xf0 [ 600.159765] __kernfs_create_file+0x46/0x323 [ 600.164176] sysfs_add_file_mode_ns+0x1e4/0x450 [ 600.168843] sysfs_add_file+0x4f/0x60 [ 600.172654] sysfs_merge_group+0xe2/0x210 [ 600.176798] dpm_sysfs_add+0x121/0x1b0 [ 600.180689] device_add+0x968/0x1490 [ 600.184404] ? device_private_init+0x190/0x190 [ 600.188982] ? kobject_set_name_vargs+0x101/0x150 [ 600.193832] hci_register_dev+0x2d9/0x810 [ 600.197985] ? hci_init_sysfs+0x7c/0xa0 [ 600.201976] __vhci_create_device+0x2a6/0x560 [ 600.206488] vhci_write+0x2a1/0x437 [ 600.210127] __vfs_write+0x4a7/0x6b0 [ 600.213848] ? kernel_read+0x120/0x120 [ 600.217736] ? __inode_security_revalidate+0xd6/0x130 [ 600.222920] ? selinux_file_permission+0x170/0x480 [ 600.227844] ? rw_verify_area+0xea/0x2b0 [ 600.231910] vfs_write+0x198/0x500 [ 600.235454] SyS_write+0xfd/0x230 [ 600.238905] ? SyS_read+0x230/0x230 [ 600.242529] ? do_syscall_64+0x53/0x640 [ 600.246502] ? SyS_read+0x230/0x230 [ 600.250129] do_syscall_64+0x1e8/0x640 [ 600.254021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 600.258874] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 600.264216] RIP: 0033:0x459829 [ 600.267402] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.275111] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 600.282463] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 600.289730] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 600.296994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 13:57:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) socket$inet_udp(0x2, 0x2, 0x0) 13:57:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:41 executing program 2: arch_prctl$ARCH_SET_CPUID(0x1012, 0x8001) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:41 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, 0x0, 0x0) 13:57:41 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) r1 = getpgrp(0x0) sched_getparam(r1, &(0x7f00000002c0)) dup3(r0, r0, 0x80000) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x101000) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x8, @local, 0x100000001}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000440)={r5, 0x1}, 0x8) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 600.304260] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:41 executing program 4 (fault-call:5 fault-nth:30): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 600.349829] Bluetooth: Can't register HCI device 13:57:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x280, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB]}) [ 600.467364] FAULT_INJECTION: forcing a failure. [ 600.467364] name failslab, interval 1, probability 0, space 0, times 0 [ 600.503116] CPU: 1 PID: 24247 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 600.510267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.519622] Call Trace: [ 600.519641] dump_stack+0x138/0x19c [ 600.519660] should_fail.cold+0x10f/0x159 [ 600.529998] should_failslab+0xdb/0x130 [ 600.530015] kmem_cache_alloc+0x2d7/0x780 [ 600.530027] ? wait_for_completion+0x420/0x420 [ 600.530045] __kernfs_new_node+0x70/0x420 [ 600.530056] kernfs_new_node+0x80/0xf0 [ 600.530074] __kernfs_create_file+0x46/0x323 [ 600.530085] sysfs_add_file_mode_ns+0x1e4/0x450 [ 600.559848] sysfs_add_file+0x4f/0x60 [ 600.563653] sysfs_merge_group+0xe2/0x210 [ 600.567815] dpm_sysfs_add+0x121/0x1b0 [ 600.571706] device_add+0x968/0x1490 [ 600.575445] ? device_private_init+0x190/0x190 [ 600.580024] hci_register_dev+0x2d9/0x810 [ 600.584180] ? hci_init_sysfs+0x7c/0xa0 [ 600.588138] __vhci_create_device+0x2a6/0x560 [ 600.592612] vhci_write+0x2a1/0x437 [ 600.596217] __vfs_write+0x4a7/0x6b0 [ 600.599907] ? kernel_read+0x120/0x120 [ 600.603776] ? rw_verify_area+0xea/0x2b0 [ 600.607819] vfs_write+0x198/0x500 [ 600.611343] SyS_write+0xfd/0x230 [ 600.614776] ? SyS_read+0x230/0x230 [ 600.618380] ? do_syscall_64+0x53/0x640 [ 600.622331] ? SyS_read+0x230/0x230 [ 600.625935] do_syscall_64+0x1e8/0x640 [ 600.629797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 600.634620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 600.639786] RIP: 0033:0x459829 [ 600.642970] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.650655] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 600.657901] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 13:57:42 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x1f, 0x3f, 0x4, 0x10000, 0x7}, &(0x7f0000000240)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="c4ea2610"]}) getsockopt$sock_timeval(r2, 0x1, 0x57, &(0x7f0000000040), &(0x7f00000000c0)=0x10) 13:57:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:42 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, 0x0, 0x0) 13:57:42 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000002c0)={0x0, 0x0, [0x80000001, 0x0, 0x100000000, 0x3, 0x1004, 0x0, 0x0, 0xfffffff7fffffffd]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x1e) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000001c0)={0x6, "5d8a3f96c93ac8bd4671d84c94eea70559fae2f62cb71a3b60bd3912cfb90090", 0x2, 0x7, 0x5, 0x0, 0x10000, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) [ 600.665145] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 600.672435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 600.679701] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 600.698800] Bluetooth: Can't register HCI device 13:57:42 executing program 4 (fault-call:5 fault-nth:31): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:42 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0), 0x0) 13:57:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:42 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x4000) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000140)={'syzkaller0\x00', 0x0, 0x3}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:42 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0), 0x0) 13:57:42 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x200}, {0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, [], 0x2a}, 0x3}, r2, 0x5}}, 0x48) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) fcntl$setsig(r1, 0xa, 0x34) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 600.909909] FAULT_INJECTION: forcing a failure. [ 600.909909] name failslab, interval 1, probability 0, space 0, times 0 13:57:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) flistxattr(r0, &(0x7f0000000080)=""/99, 0x63) [ 600.986984] CPU: 0 PID: 24272 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 600.994136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.003485] Call Trace: [ 601.006076] dump_stack+0x138/0x19c [ 601.009802] should_fail.cold+0x10f/0x159 [ 601.013953] should_failslab+0xdb/0x130 [ 601.017922] kmem_cache_alloc_trace+0x2e9/0x790 [ 601.022603] ? devm_device_remove_groups+0x50/0x50 [ 601.027548] kobject_uevent_env+0x378/0xc23 [ 601.031868] ? wait_for_completion+0x420/0x420 [ 601.036470] kobject_uevent+0x20/0x26 [ 601.040264] device_add+0xa3e/0x1490 [ 601.043968] ? device_private_init+0x190/0x190 [ 601.048532] hci_register_dev+0x2d9/0x810 [ 601.052665] ? hci_init_sysfs+0x7c/0xa0 [ 601.056656] __vhci_create_device+0x2a6/0x560 [ 601.061132] vhci_write+0x2a1/0x437 [ 601.064748] __vfs_write+0x4a7/0x6b0 [ 601.068446] ? kernel_read+0x120/0x120 [ 601.072311] ? retint_kernel+0x2d/0x2d [ 601.076178] ? security_file_permission+0x89/0x1f0 [ 601.081087] ? rw_verify_area+0xea/0x2b0 [ 601.085124] vfs_write+0x198/0x500 [ 601.088641] SyS_write+0xfd/0x230 [ 601.092073] ? SyS_read+0x230/0x230 [ 601.095715] ? do_syscall_64+0x53/0x640 [ 601.099684] ? SyS_read+0x230/0x230 [ 601.103309] do_syscall_64+0x1e8/0x640 [ 601.107189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.112034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.117226] RIP: 0033:0x459829 [ 601.120406] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 601.128111] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 13:57:42 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0), 0x0) [ 601.135373] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 601.142633] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 601.149899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 601.157164] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 13:57:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) io_setup(0x3, &(0x7f0000000080)) 13:57:42 executing program 4 (fault-call:5 fault-nth:32): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:42 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) [ 601.457012] FAULT_INJECTION: forcing a failure. [ 601.457012] name failslab, interval 1, probability 0, space 0, times 0 [ 601.496768] CPU: 0 PID: 24311 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 601.504006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.513358] Call Trace: [ 601.515933] dump_stack+0x138/0x19c [ 601.519544] should_fail.cold+0x10f/0x159 [ 601.523671] should_failslab+0xdb/0x130 [ 601.527620] kmem_cache_alloc+0x2d7/0x780 [ 601.531744] ? wait_for_completion+0x420/0x420 [ 601.536306] __kernfs_new_node+0x70/0x420 [ 601.540429] kernfs_new_node+0x80/0xf0 [ 601.544294] __kernfs_create_file+0x46/0x323 [ 601.548683] sysfs_add_file_mode_ns+0x1e4/0x450 [ 601.553332] sysfs_add_file+0x4f/0x60 [ 601.557111] sysfs_merge_group+0xe2/0x210 [ 601.561243] dpm_sysfs_add+0x121/0x1b0 [ 601.565105] device_add+0x968/0x1490 [ 601.568799] ? device_private_init+0x190/0x190 [ 601.573362] hci_register_dev+0x2d9/0x810 [ 601.577487] ? hci_init_sysfs+0x7c/0xa0 [ 601.581446] __vhci_create_device+0x2a6/0x560 [ 601.585915] vhci_write+0x2a1/0x437 [ 601.589526] __vfs_write+0x4a7/0x6b0 [ 601.593224] ? kernel_read+0x120/0x120 [ 601.597117] ? rw_verify_area+0xea/0x2b0 [ 601.601177] vfs_write+0x198/0x500 [ 601.604719] SyS_write+0xfd/0x230 [ 601.608166] ? SyS_read+0x230/0x230 [ 601.611784] ? do_syscall_64+0x53/0x640 [ 601.615750] ? SyS_read+0x230/0x230 [ 601.619373] do_syscall_64+0x1e8/0x640 [ 601.623260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.628101] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.633282] RIP: 0033:0x459829 [ 601.636457] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 601.644494] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 601.651759] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 601.659021] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 601.666285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 601.673562] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 601.682198] protocol 88fb is buggy, dev hsr_slave_0 [ 601.687869] protocol 88fb is buggy, dev hsr_slave_1 [ 601.743288] Bluetooth: Can't register HCI device 13:57:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0xa400285c) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000180)) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') 13:57:43 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) 13:57:43 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @reserved}, 0x10) 13:57:43 executing program 2: syz_init_net_socket$ax25(0x3, 0x3, 0x7) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@struct={0xf, 0x4, 0x0, 0x4, 0x3, 0x6d3d, [{0x0, 0x1, 0x8}, {0x0, 0x5, 0x20}, {0xff, 0x5, 0x7b}, {0x8, 0x3, 0x10001}]}, @func={0x9, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000100)=""/4096, 0x64, 0x1000, 0x1}, 0x20) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001140)={r0, 0x0, 0x3, 0x80000001, 0x5}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:43 executing program 4 (fault-call:5 fault-nth:33): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:43 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) 13:57:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB]}) 13:57:43 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x10000, 0x0, [0x0, 0xa60a, 0x0, 0x5]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r1, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$KVM_SMI(r1, 0xaeb7) recvmmsg(r1, &(0x7f0000004a00)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002380)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x3, &(0x7f00000023c0)=""/37, 0x25}, 0x9}, {{&(0x7f0000002400)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003780)=[{&(0x7f0000002480)=""/4, 0x4}, {&(0x7f00000024c0)=""/211, 0xd3}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/172, 0xac}, {&(0x7f0000003680)=""/241, 0xf1}], 0x5, &(0x7f0000003800)=""/249, 0xf9}, 0x13db}, {{&(0x7f0000003900)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004980)=[{&(0x7f0000003980)=""/4096, 0x1000}], 0x1, &(0x7f00000049c0)=""/4, 0x4}, 0x1}], 0x3, 0x100, &(0x7f0000004ac0)={0x77359400}) 13:57:43 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x9}, &(0x7f0000000180)=0x8) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffffffffffffffc, @local, 'batadv0\x00'}}, 0x3a) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0xfdfdffff00000000, {0x0, @local, 'ip6_vti0\x00'}}) [ 601.931331] FAULT_INJECTION: forcing a failure. [ 601.931331] name failslab, interval 1, probability 0, space 0, times 0 [ 601.979521] CPU: 0 PID: 24331 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 601.986663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.996014] Call Trace: [ 601.996032] dump_stack+0x138/0x19c [ 601.996053] should_fail.cold+0x10f/0x159 [ 601.996069] should_failslab+0xdb/0x130 [ 601.996084] kmem_cache_alloc+0x2d7/0x780 [ 601.996096] ? wait_for_completion+0x420/0x420 [ 601.996114] __kernfs_new_node+0x70/0x420 [ 601.996127] kernfs_new_node+0x80/0xf0 [ 601.996140] __kernfs_create_file+0x46/0x323 [ 601.996151] sysfs_add_file_mode_ns+0x1e4/0x450 [ 601.996164] sysfs_add_file+0x4f/0x60 [ 601.996175] sysfs_merge_group+0xe2/0x210 [ 601.996189] dpm_sysfs_add+0x121/0x1b0 [ 601.996200] device_add+0x968/0x1490 [ 601.996215] ? device_private_init+0x190/0x190 [ 601.996226] ? kobject_set_name_vargs+0x101/0x150 [ 601.996240] hci_register_dev+0x2d9/0x810 [ 601.996249] ? hci_init_sysfs+0x7c/0xa0 [ 601.996265] __vhci_create_device+0x2a6/0x560 [ 601.996278] vhci_write+0x2a1/0x437 13:57:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000080)=""/136, 0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:43 executing program 3 (fault-call:5 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 601.996291] __vfs_write+0x4a7/0x6b0 [ 601.996306] ? kernel_read+0x120/0x120 [ 602.006663] ? rw_verify_area+0xea/0x2b0 [ 602.006675] vfs_write+0x198/0x500 [ 602.006688] SyS_write+0xfd/0x230 [ 602.006699] ? SyS_read+0x230/0x230 [ 602.006708] ? do_syscall_64+0x53/0x640 [ 602.006719] ? SyS_read+0x230/0x230 [ 602.014824] do_syscall_64+0x1e8/0x640 [ 602.014833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.014849] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 602.014858] RIP: 0033:0x459829 [ 602.036449] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.036460] RAX: ffffffffffffffda RBX: 00007f54bc851c90 RCX: 0000000000459829 [ 602.036466] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000004 [ 602.036472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 602.036483] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 602.036489] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 0000000000000005 [ 602.141629] Bluetooth: Can't register HCI device 13:57:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:43 executing program 4 (fault-call:5 fault-nth:34): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8000, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="b0513eb28642ac526d4a3829bb0f97236afac285d813328ee40c4e822f82eb694c618dfee9804806b37ee9e1751656803c5d7ee4c413841476830adb5d32e00ef7b72bc55e74"]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xbb756bce33836e8c, 0x0) 13:57:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write(r0, &(0x7f0000000140)="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", 0x1000) unshare(0x400) r1 = socket(0x15, 0x80005, 0x0) listen(r1, 0xa4) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x4) 13:57:43 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15cc60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001280)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f00000012c0), 0x4) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='$(&\x00') ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:43 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, "e75566667ba1716a887f06c57e7211a41ad1da61dd0996344ecdfa4360329e6a86d5689df1ff4d39b6efb235aca38000aacace16f4d8eb459abae32f05c7189b33043e92917a8874ae40cd2ecb4f73a981508492b2925b7eb4ce1f29b1a79a9c72da6480e41f17a87d2af4cded37c6913b6c5d80fad7492e83c040c71bf6dee41d71670321476428cb09b5562bbfe0f60d4f68f0c7b3e556eeb40b485b"}, 0x9e) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:43 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7, 0xe28b29b653548bca) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x81, 0x0, 0x1, 0x200}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000200)={0x0, r2}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x191, 0x4}, 0x18) rt_sigprocmask(0x1, &(0x7f0000000000)={0x1}, &(0x7f00000000c0), 0x8) modify_ldt$read(0x0, &(0x7f0000000140)=""/69, 0x45) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x1) [ 602.320138] protocol 88fb is buggy, dev hsr_slave_0 [ 602.325252] protocol 88fb is buggy, dev hsr_slave_1 [ 602.338504] kobject_add_internal failed for hci1 (error: -2 parent: bluetooth) [ 602.354722] Bluetooth: Can't register HCI device 13:57:43 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x101) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f00000002c0)=0x2f) [ 602.400140] protocol 88fb is buggy, dev hsr_slave_0 [ 602.405306] protocol 88fb is buggy, dev hsr_slave_1 13:57:43 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) connect$rose(r1, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="105873dedb19625c079905d3be585528c77f75c357c54325df867fd708584ba01d659017837a8381218c755c181202e8ee8a1cb5ae5630f0808818dc44328bd257cf618f5aa1e5cf046fda843e100423edf6bf62e7e348be8f5f187e2116778b0b4cc971d24dae"]}) r1 = fcntl$dupfd(r0, 0x407, r0) sendto$ax25(r1, &(0x7f0000000000)="b44239aa683ec75df34b0c2abc6d7f4d2de5136f853885f34db3c366b9c13fd7bec85258a1c821a8eef077f45381ead17146b14c70f9ff382e5e934cc6e575bc72e24629331b24015fa6bca19790e08a4c7e03e9c67e5631c7d956c7af6d267d1b383b6f20072023be06c96cbff2336490a7a4f0733f4dcc1233b5a9dac328fe4ae5bd30cd2a00ffa4faa342e7d0846548044f168813121cb4955d8f8629375af068ab01f830b5141f26a2cb6bf52ae964d53e90a54a3e2239d9d7501375b00484c4e13af8655e7b3a8dc0be13390f0d661d39901d93ddbc5d085529105970272fbb21e49d350580", 0xe8, 0x4000, &(0x7f0000000200)={{0x3, @bcast, 0x2}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) [ 602.560374] protocol 88fb is buggy, dev hsr_slave_0 [ 602.565981] protocol 88fb is buggy, dev hsr_slave_1 [ 602.572294] protocol 88fb is buggy, dev hsr_slave_0 [ 602.577901] protocol 88fb is buggy, dev hsr_slave_1 [ 602.913915] FAULT_INJECTION: forcing a failure. [ 602.913915] name fail_futex, interval 1, probability 0, space 0, times 1 [ 602.925469] CPU: 0 PID: 24351 Comm: syz-executor.3 Not tainted 4.14.139 #35 [ 602.932559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.941900] Call Trace: [ 602.944477] dump_stack+0x138/0x19c [ 602.948106] should_fail.cold+0x10f/0x159 [ 602.952233] get_futex_key+0xa4e/0x1040 [ 602.956189] ? futex_lock_pi_atomic+0x210/0x210 [ 602.960845] futex_wake+0xd9/0x430 [ 602.964367] ? __lock_acquire+0x5f7/0x4620 [ 602.968577] ? lock_downgrade+0x6e0/0x6e0 [ 602.972708] ? get_futex_key+0x1040/0x1040 [ 602.976924] do_futex+0x290/0x19e0 [ 602.980451] ? __lock_acquire+0x5f7/0x4620 [ 602.984681] ? __lock_acquire+0x5f7/0x4620 [ 602.988893] ? exit_robust_list+0x230/0x230 [ 602.993186] ? trace_hardirqs_on+0x10/0x10 [ 602.997401] ? trace_hardirqs_on+0x10/0x10 [ 603.001638] ? __might_fault+0x110/0x1d0 [ 603.005683] ? save_trace+0x290/0x290 [ 603.009476] ? __might_fault+0x110/0x1d0 [ 603.013516] ? __might_fault+0x110/0x1d0 [ 603.017553] ? find_held_lock+0x35/0x130 [ 603.021602] SyS_futex+0x215/0x302 [ 603.025134] ? do_futex+0x19e0/0x19e0 [ 603.028930] mm_release+0x30e/0x450 [ 603.032530] do_exit+0x3ad/0x2c10 [ 603.035982] ? find_held_lock+0x35/0x130 [ 603.040023] ? mm_update_next_owner+0x5d0/0x5d0 [ 603.044686] do_group_exit+0x111/0x330 [ 603.048550] get_signal+0x381/0x1cd0 [ 603.052247] ? vfs_readv+0xe0/0x130 [ 603.055868] ? kfree+0x20a/0x270 [ 603.059233] do_signal+0x86/0x19a0 [ 603.062885] ? setup_sigcontext+0x7d0/0x7d0 [ 603.067200] ? kick_process+0xef/0x180 [ 603.071065] ? task_work_add+0x8e/0xf0 [ 603.074945] ? fput+0xd4/0x150 [ 603.078116] ? do_readv+0x1af/0x2d0 [ 603.081726] ? exit_to_usermode_loop+0x3d/0x220 [ 603.086383] exit_to_usermode_loop+0x15c/0x220 [ 603.090944] do_syscall_64+0x4bc/0x640 [ 603.094852] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 603.099691] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 603.104864] RIP: 0033:0x459829 13:57:44 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000100)={0x4}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @local, 0xde}, {0xa, 0x4e20, 0x1, @empty, 0x1000}, r2, 0xc6}}, 0x48) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:44 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000000)={0x6, 0x23}) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x5c, 0x4, 0xffffffffffffff00, "2f34cc3d986ba16bdeda30c914f3879b", "f16d984435a96e5a4cddd913b1b01872c26147e421bdca103672aa347566d774bf8c420b14e7aa1ef47c21dcb2552a18ae88d12580847a95376a4dd805b9a06cf4c68e9ee90c2a"}, 0x5c, 0x1) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x451808}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c0, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb7e2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x27cc}]}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2eb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9fac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8fb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x55}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe88e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6b}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x54a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 13:57:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']}) 13:57:44 executing program 4: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x4, 0x2c2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1f, 0x0, @mcast1, 0x9}, 0x1c) getpeername$inet6(r0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) getsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000002c0)=""/217, &(0x7f00000000c0)=0xd9) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:44 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) [ 603.108029] RSP: 002b:00007f8441ec9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 603.115747] RAX: fffffffffffffe00 RBX: 00007f8441ec9c90 RCX: 0000000000459829 [ 603.123003] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000003 [ 603.130282] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 603.137533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8441eca6d4 [ 603.144802] R13: 00000000004c6b54 R14: 00000000004dc048 R15: 0000000000000005 13:57:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x4, 0xd1a38716c97a8f73, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0xc19, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3853, 0x7ff, 0x1, 0x1, 0xb72, 0xffff, 0x0, 0x26e2, 0x0}, &(0x7f0000000100)=0x20) write$sndseq(r2, &(0x7f00000002c0)=[{0x5, 0x7f, 0x1c7c, 0x9, @tick=0x6, {0x5, 0x1f}, {0x2, 0x9}, @ext={0xdc, &(0x7f00000001c0)="89245fd8ecdd5242e50c5e309fa025ea98bc123e1f5319761a57117fe38ddcdd1151d51ebd0530b0e5e875c5ae1cc264e9d622cc8723ed3cd4dd41c34dcc9d452dc7fab8304253b6e66978f84e1d09eec3928390e97b33f828c02390f1955b0fd26296a8882629ef9ab236cb2827917875f4e97245b1a56e3ea40543230f1b79d47efb83944c77fa8c0aa2aaa0b0705978121d4e9647a9270bc494814d721bc0eb47a20ebfb5b1c4062180bef60466d5e27b77dd2d653635a28da6a87cb91e304842d3468e245fa4ca3ae7a5675fa3d1b15688f4acf8928ca8372d98"}}], 0x30) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r4, 0x1}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:44 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) connect$rose(r1, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:44 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x24) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:44 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:44 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) connect$rose(r1, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:45 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) connect$rose(r1, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:45 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "438951746ac7e4014f940a006348ee2a"}, 0x11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) 13:57:45 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001100)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) recvmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/67, 0x43}], 0x2}, 0x80000001}, {{&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f0000000640)=""/49, 0x31}], 0x4, &(0x7f00000006c0)=""/17, 0x11}, 0x3}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000b80)=""/10, 0xa}, {&(0x7f0000000bc0)=""/55, 0x37}], 0x7}, 0x8001}, {{&(0x7f0000000c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)=""/33, 0x21}, {&(0x7f0000000d40)=""/187, 0xbb}, {0x0}, {&(0x7f0000000e00)=""/106, 0x6a}], 0x4, &(0x7f0000000ec0)=""/245, 0xf5}, 0x7b}], 0x4, 0x3, &(0x7f00000010c0)={0x0, 0x989680}) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:45 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1f, 0xc440) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x10001) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:45 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x240000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0xfab, 0x10, [0x8001, 0xf81, 0x3, 0x8]}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000000140)=""/208, 0x1, 0x4}}, 0x68) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) 13:57:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="fc"]}) 13:57:45 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80) recvfrom$llc(r1, &(0x7f0000000200)=""/135, 0x87, 0x1, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1, 0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) 13:57:45 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000002c0)) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:45 executing program 5: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x4, 0x2c2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1f, 0x0, @mcast1, 0x9}, 0x1c) getpeername$inet6(r0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) getsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000002c0)=""/217, &(0x7f00000000c0)=0xd9) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)={0xb0, 0xffffffffffffffda, 0x1, [{0x0, 0x8, 0x8, 0x80000000, 'bridge0\x00'}, {0x1, 0x50c5be42, 0x8, 0x1, 'bridge0\x00'}, {0x5, 0x239c, 0x8, 0xfffffffffffffffa, 'bridge0\x00'}, {0x2, 0x6, 0x8, 0xb4, 'bridge0\x00'}, {0x1, 0xffffffff00000001, 0x8, 0x4, 'bridge0\x00'}]}, 0xb0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="50897762b86d6b4dfd2cffbddb15e14731ec468332c33a2b4014eb4ea154745a5e020ac9c1368906562a400959673d2ee9c8c561f2e3d3872d4daf3790dc53c7d999b3aa3672ce1c21d8dd898ec15ce3ca1b80acb37004cee0874767963ae2d9a5a99d7dc59d5db0d9174677b8d63b8973eb3d1cb7de6265c72ff1dc01e74ba89778923eb2357b06ffa05008d133fdc53ace33446ebbbc3511e7435b01bbf3d300911e44b466bd9ee133ceca8e55a158b2e9973af2af69785db8e2308835cd1c042ef306c448188fad1ba2dffe19368600"/219]}) 13:57:45 executing program 5: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x4, 0x2c2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1f, 0x0, @mcast1, 0x9}, 0x1c) getpeername$inet6(r0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) getsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000002c0)=""/217, &(0x7f00000000c0)=0xd9) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2624c21f3e0636788679d1dd343fafc0d621db917b0063a966b35eb1873b3a4c1b871e2c116145a175f1cb67635eabbb1169cdbdf906f91db3625bf0a28c534d0983e28543831db5f91cb1f167c83e4220b16ce071f23fd7aa0e7c3283fcb6c029cda09ff4d1b579189dddc23f627b92d2191dc1c6eee5c233ce2b2e3975da"]}) r1 = dup3(r0, r0, 0x80000) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)=0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() write$P9_RSTATu(r1, &(0x7f0000000200)={0xc0, 0x7d, 0x1, {{0x0, 0x84, 0x3, 0x5, {0x0, 0x0, 0x2}, 0x100000, 0x40, 0x8, 0x8001, 0x9, 'mime_type', 0x15, '\'em0+*@wlan1^\xa5em1eth1', 0x2b, 'eth0\'wlan0bdevtrustedvmnet0\xb1&selfbdevuser*\x00', 0x8, 'bridge0\x00'}, 0x27, 'mime_typeposix_acl_accessbdev-vboxnet0:', r2, r3, r4}}, 0xc0) 13:57:45 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$inet6(0xa, 0x3223420b8426d3a3, 0x2) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x404401) r2 = dup3(r0, r0, 0x2ba89eebddc8b3e2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000240)=0xfffffe6f) 13:57:46 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20c00, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200, 0x2a) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x2, 0x347203) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x800, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) r3 = geteuid() ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000002c0)={0x3, @default, r3}) 13:57:46 executing program 5: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x4, 0x2c2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1f, 0x0, @mcast1, 0x9}, 0x1c) getpeername$inet6(r0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) getsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000002c0)=""/217, &(0x7f00000000c0)=0xd9) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:46 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x428000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x336) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x118}, 0x10) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) timerfd_create(0x2, 0x800) 13:57:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) 13:57:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bcsh0\x00', &(0x7f0000000080)=ANY=[]}) 13:57:46 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x4}, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) write$vhci(r2, &(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:46 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000002c0)="da563db62f931bbed4dd6190a2fea03087c0728fae9ad6374449300f23dc4c14957ecb6479a79c79a2972efdc0b9cbe9d022a6f951d6fce3cdcaa69136091b00143939abf9d00cdcde4fd73954bacbec46b4588b56c941c512379e5923d0c5b866765cf49cc58ffdb15ff3879b60cba743db2825246ced7137cbca51499d95959a1d0c4ecb4c9f296f57e0e9c4b82ec973046a6227052b121cf57864b232585b3caca6c4df38e08f0dd782d49cb75704130b88532562aaed78ddffb4146575c2ad", &(0x7f00000003c0)="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", 0x1}, 0x20) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x17) 13:57:46 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80) recvfrom$llc(r1, &(0x7f0000000200)=""/135, 0x87, 0x1, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="a0423c93a9812ede04f642bc4355f46caa2e13d01001123bc8da806821ba68b48135cf47560ec3424258491d796264c5bacf6fb2692fa195a0f967338b38a09a6adca5801c9c7ea052654390a0e20501f722307d0300513e63e633ff0f00000000000100d6d8d8c14af7c2883d"]}) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x1, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='big_key\x00', 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 13:57:46 executing program 4: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x10f, 0x3e9, 0x5, 0x15b, 0x248, 0x8, 0xb8, 0x9112}, "ae05269624399fda8ea6f884c617768911c6e5044ec86e", [[], [], [], [], [], [], [], []]}, 0x837) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:46 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80) recvfrom$llc(r1, &(0x7f0000000200)=""/135, 0x87, 0x1, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:46 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80) recvfrom$llc(r1, &(0x7f0000000200)=""/135, 0x87, 0x1, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:47 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:47 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000015c0)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)=0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x100, 0xffffffff, 0x80, 0x10, 0x0, 0x10000, 0x0, 0x2, 0x5, 0x78c, 0x6, 0x8001, 0x6, 0x8, 0x4d4800, 0x6, 0x9, 0x9, 0x3, 0x40, 0x8, 0xda0, 0x5a, 0x737fefca, 0x10001, 0x5, 0x7, 0x4, 0x7bc, 0x100000001, 0x3f, 0x3, 0x9, 0x8000, 0xfffffffffffffffb, 0xffffffff7fffffff, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x8004, 0x9, 0x352, 0x0, 0x6, 0x4, 0x7fffffff}, r4, 0x3, 0xffffffffffffffff, 0x9) ustat(0x81, &(0x7f0000000440)) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000480)={0x9, 0xc, 0x3, "a6393afa5849ac45ce49c5bd6536c91059a76e0507c155213fd4f36b8fe214c0", 0x3631564e}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f00000004c0)=0x54) openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x6bdec60e654ef042, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x2d8, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, r8}, 0xc) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x0, 0x2) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000001c0)={0x20, 0x3, 0x6, 0x6, 0x80000000}) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x6685, &(0x7f0000001540)={0x1, 0x401, 0x1000, 0x49, &(0x7f00000004c0)="6dfd1fb511c05fe520d22c1acc6baca4b3b83694b49d8a2d567be4937f04662bdb98354ba11788cd9cecd3f86dcef24b35ae3520fd56bff5129d729e6f289983295c82ee5f74cf4d93", 0x1000, 0x0, &(0x7f0000000540)="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"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl(r2, 0x9, &(0x7f00000003c0)="2ce9786f9c77bfe3c89ae0da939459609efaa478eaea0dc5138c583de84d6c81944458b899435eb5c7f91d789d0a32cc374fb4bb8d0c137f1e6d9cd4c62c2c595e") 13:57:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="f7"]}) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fsetxattr$security_smack_entry(r0, &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='/dev/vbi#\x00', 0xa, 0x1) 13:57:47 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000002c0)="da563db62f931bbed4dd6190a2fea03087c0728fae9ad6374449300f23dc4c14957ecb6479a79c79a2972efdc0b9cbe9d022a6f951d6fce3cdcaa69136091b00143939abf9d00cdcde4fd73954bacbec46b4588b56c941c512379e5923d0c5b866765cf49cc58ffdb15ff3879b60cba743db2825246ced7137cbca51499d95959a1d0c4ecb4c9f296f57e0e9c4b82ec973046a6227052b121cf57864b232585b3caca6c4df38e08f0dd782d49cb75704130b88532562aaed78ddffb4146575c2ad", &(0x7f00000003c0)="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", 0x1}, 0x20) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x17) 13:57:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:47 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x20000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x80000) fcntl$getflags(r1, 0x40a) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000180)=0xde, 0x4) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:47 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000002c0)="da563db62f931bbed4dd6190a2fea03087c0728fae9ad6374449300f23dc4c14957ecb6479a79c79a2972efdc0b9cbe9d022a6f951d6fce3cdcaa69136091b00143939abf9d00cdcde4fd73954bacbec46b4588b56c941c512379e5923d0c5b866765cf49cc58ffdb15ff3879b60cba743db2825246ced7137cbca51499d95959a1d0c4ecb4c9f296f57e0e9c4b82ec973046a6227052b121cf57864b232585b3caca6c4df38e08f0dd782d49cb75704130b88532562aaed78ddffb4146575c2ad", &(0x7f00000003c0)="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", 0x1}, 0x20) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x17) 13:57:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="780b2d9bb4c305d2108c30cdcfe73e62f22193aac588a80f8317b6f8c1601701a18d39229a7afb0acf95fdddb1dc74e5dc2d0da32367c62d5094157d396e4b9bd576040e4d8bba6a43d1c1741e2d2e4beaa2a10e6b65761702fe055614958e4e6965e7b6927d86ce135f81811538f1d0686849000000"]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x16000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x110) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000080)={0x40, 0x80, 0x6e, 0x5}) 13:57:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0]]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x1) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f00000000c0)="14aa6934ec97fdc70480c1d9290e768cf771a37ffdcbc84d2a3ab5b2326303c91dc7f1601ec1a48434b09e09bf0eb83a7f352bc51979d268373e6bd925d79d24cb5dfd1097cfcb07ea7cb97ab137fac4741865743ac1abc584566a8b224cbe5bac08df7f41965953", 0x68) 13:57:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x3, 0x2, 0xe, 0x7ff, 0x64, "3c9af098c884eb9018a960c12f77f10729fa91aae1f85849edda4a10602f20822e6df422875bd7c335cbe916fa0e3c250642cac71dfe873a76244ac7ec80b8036805502b28623df3c9f723084fe33cff364c684ca8e3e7f4394d642fb8ce29dda8262277"}, 0x6e, 0x1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:47 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000002c0)="da563db62f931bbed4dd6190a2fea03087c0728fae9ad6374449300f23dc4c14957ecb6479a79c79a2972efdc0b9cbe9d022a6f951d6fce3cdcaa69136091b00143939abf9d00cdcde4fd73954bacbec46b4588b56c941c512379e5923d0c5b866765cf49cc58ffdb15ff3879b60cba743db2825246ced7137cbca51499d95959a1d0c4ecb4c9f296f57e0e9c4b82ec973046a6227052b121cf57864b232585b3caca6c4df38e08f0dd782d49cb75704130b88532562aaed78ddffb4146575c2ad", &(0x7f00000003c0)="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", 0x1}, 0x20) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x17) 13:57:47 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0xfffffffffffffffa, 0x0, 0x1, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000240)={0x7, r2}) 13:57:47 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:47 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f00000001c0)=0x10) 13:57:47 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:47 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0xf46c, 0xbda, 0x1, 0xfffffffffffffffb, 0xd7, "7f50dd7a5d6d44583b71736271eb54b1d06cf3", 0xfffffffffffffffe, 0x9}) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) fadvise64(r2, 0x0, 0x77, 0x1) 13:57:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x800, 0x5, 0x1, 0x3ff, 0x7e, 0x4, 0x4b, {0x0, @in6={{0xa, 0x4e20, 0x20, @mcast2, 0x9c57}}, 0x4, 0xfff, 0x9, 0x2, 0x3f}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0xda5}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:48 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fffffff, @empty, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf699}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @remote, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x800) 13:57:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:48 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:48 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x24) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000001c0)={0x10000, 0x9, 0x800, @dev={[], 0xc}, 'veth1\x00'}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$RTC_AIE_ON(r2, 0x7001) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x1, 0x0, 0xffffffff00000001, 0xfffffffffffeffff, "9f6318449d46853ec2313ad28a231a7e54c2fd6b29a652394fffa8e87e3a9005"}) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000200)) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x200, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) 13:57:48 executing program 1: syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x100, 0x82103) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) r0 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:48 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x42, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 13:57:48 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x101) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f00000002c0)=0x2f) 13:57:48 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x4) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)=0xde88ef5b3c919b6b) 13:57:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:48 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x101) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f00000002c0)=0x2f) 13:57:48 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x40003, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:48 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x101) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f00000002c0)=0x2f) 13:57:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:48 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:48 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x40100) unshare(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_settime(0x6, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x5177, 0x8000) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x480) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000001288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001380)=""/45, 0x2d) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x95c8}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x2c0}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x0, 0x2) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x100) 13:57:48 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) 13:57:48 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000200)=0x20) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:48 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x64, 0x1000, &(0x7f0000000140)="1109af0d925d891c0e2a9ea1485db16fbdb21ae54aa10e0fd78d1a54928d671d39ca4b9ff232a9cc822568552337073712f177952cffe23d56ee005c0681c9e1d944c93cabef98645c40bff2d1ff877b7f72d3a1bf111db24a3aa5f418cc78378c3e3cb4", &(0x7f0000000400)=""/4096, 0x4}, 0x28) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x1, 0x762c, 0x9, 0x7ff, 0x9}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 13:57:49 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r1, &(0x7f00000001c0)={'system_u:object_r:root_t:s0', 0x20, 'unconfined', 0x20, 0x8e4}, 0x3c) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) write$P9_ROPEN(r1, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x40, 0x2, 0x4}, 0x5}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000340)='./file0\x00', 0x8, 0x4) getsockname$tipc(r1, &(0x7f0000000200)=@name, &(0x7f00000002c0)=0x10) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:49 executing program 5: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff80c) r0 = getpid() mknod(&(0x7f0000000040)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ptrace(0x11, r0) 13:57:49 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x20140) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x2, 0x7, 0x9, 0xffffffffffffffc1, 0x5, 0x3, 0x9, {0x0, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x2}}, 0x400, 0x0, 0x3, 0x29, 0x81}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r1, 0x7}, &(0x7f0000000340)=0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2802, 0x0) write$rfkill(r4, &(0x7f00000000c0)={0x100, 0x2, 0x3, 0x0, 0xfffffffffffffffd}, 0x8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f00000013c0)=0x1008) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x3, 0x2) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x6) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000002c0)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000340)=""/107) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xb3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) bind$vsock_dgram(r2, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 13:57:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="fc4ed012318c3aacfad7c57f47e31ad0c52eaa02192d9579b255a9589caca25536f30d4657377db285d9be4253e6917e2d90a60d5f568b6c76faf3b523bb969149db8afc89612960643e69a4c3bf9ea4f11b92a0fa29ee4c1026349a1f08e7bd532a7df8231615fc3994e31145cc867abd23cbe568ff17f6c5983dc6122861bf2fe87d3062"]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x90900, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x2, 0x101, 0x5, 0x0}, &(0x7f0000000140)=0x10) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x100000000, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x10000}, 0x8) 13:57:49 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:49 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x10801, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffefffc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xa802, 0x0) connect(r2, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x3d) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xfe2b) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$selinux_attr(r2, &(0x7f00000000c0)='system_u:system_r:kernel_t:s0\x00', 0x1e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x2, "ebdeb1df1f7e65fc"}) ioctl$RTC_WIE_ON(r2, 0x700f) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x24c00) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x7, 0x8) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) 13:57:49 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r2, 0xf2a}}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) ioctl$KVM_SMI(r0, 0xaeb7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 608.080202] net_ratelimit: 8 callbacks suppressed [ 608.080208] protocol 88fb is buggy, dev hsr_slave_0 13:57:49 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="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", 0x1000, 0xfffffffffffffffc) r1 = geteuid() getresgid(&(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0) keyctl$chown(0x4, r0, r1, r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f00000015c0)=ANY=[@ANYBLOB="a011a89bcd1e25e9b452daa3f5e8736e6180a380c84c7217a7d8a5f0f8b02f050f26d7a13a6d2ac0824f4e1877cfec49720e744c3b4c430e64acfec5da22112a5db8a1a819b399eb98efa760605bc48ca91206b3e4b7a17c8dac1703e3d0ddfbc437ecb682e2e17ff90c8b650820c906b7220c611d9b8089a099a0558088a91ccfe8804727d4b1d9fd7ec59758fb443714671e230d13f00ab69024c4374bec7fc807b1534f956111a47565b78396ec4e01de1899e25ec7e7667144f54b55bd79193f32", @ANYPTR64=&(0x7f0000001540)=ANY=[@ANYRESOCT=r4, @ANYPTR=&(0x7f0000001440)=ANY=[@ANYBLOB="48a751f86da3877ac0e3920f8d8121310a793378e982dd508ff94b6f2283c0424986824a86f0c87c2697e73fadec922a6801a0c4fab445163c2fe21c6fac274c4c58e1abfb9aa8ab3c5cdd1b85fe651cddab75db48fc80d3e228307139df7f52dc8d47e74acdd32a9190c8405e59894cedcc81cce3d489506b3bcad9093b9ce4a1a72c953141d59eeb89e9cc9b7d7b3fc4a390dfad7885a598e66213b2b96fab594aafe51ba8812aaf46f42cf7e81a4224a930dc896336f4d0fcaa8289cf21823e766dbeaf8d8a48aded", @ANYRES32=r4], @ANYRESHEX=0x0, @ANYRESOCT=r0], @ANYRES64=r3, @ANYPTR64=&(0x7f0000001300)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000001280)=ANY=[@ANYRES32=r0, @ANYRES64=r5, @ANYRESOCT=r5, @ANYPTR64], @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="e0fee0720b65c1286f94fb5109e94e5c7b7154ec36adea2d949d2e29483c796977c2ee373e70f5f50c1423d8f399d3ae0d9ce3c5143f90a7c1e346bf45aec30a7f1f8e905666b8840d751a14c574de209c42bd4f291accc1c85dc8488b50b961398fe4ad4be3678ea7db04a6abe2637f5fc85e65d3abea484f949e1307800822cee9bcff859417438f7e080e4ffe006f215d9c4ed3605560b0877ea6515f5640a0934d209bb4ee14a13566a32208d29edf8194068c0fdd05ca4d5481d063967f9a62908ff0a4c55a4ddef0926f03e27906f273d3121cc72ade5d163efa0f853e028baccc892b", @ANYRES64, @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYPTR, @ANYRES32=r4, @ANYRESHEX=r5]]]}) 13:57:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:49 executing program 1: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3ff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000001c0)=0x3ff) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x80840) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:49 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x752edcf46bc39a48) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x100000000, 0x4000}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000001c0)=0x7) 13:57:50 executing program 5: clone(0x4001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000089a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000a9e000/0x2000)=nil) open$dir(0x0, 0x404, 0x156) 13:57:50 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000280)=')]\x00^\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x762) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) r1 = fcntl$getown(r0, 0x9) getpriority(0x1a146e2d8dac2aa6, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000340)=""/40, 0xffffffffffffffdd) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000002c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r3}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000300)={r2, r2, 0x5}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) readv(r2, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/111, 0xaecf6dc1}], 0xe1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000500)="3564b3f666cccb461efee6d3599c29e0a043bf4b63390eff021c5eefba1e40d888286b88e74cdc64bb87bd7e1f4f62b2cf59b774fca38b2aa269e31ab31a8f6d1a14b61b0a10ff582e45e661e16f5f2e653c23f91b36844a438b0c22aae5a302fba786b41d1e1a6bcda6aafc28405d1396c6181bd06ebcaea2d245a21a5f55c558020eef22ec2e41c5cb6ae925395ed5", &(0x7f00000005c0)="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", 0x3}, 0x20) getsockopt$inet6_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000400)=""/201, &(0x7f0000000100)=0xc9) write$binfmt_elf64(r2, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xbaaa, 0x81, 0x1, 0x7ff, 0x3, 0x3e, 0x5439, 0x8a, 0x40, 0x350, 0x4, 0x3, 0x38, 0x1, 0x100000000, 0x347c, 0x3}, [{0x60000000, 0x2000000000000000, 0x4, 0x91, 0xc382, 0x7, 0x6, 0xbfa7b58}, {0x2, 0x4, 0x0, 0x5, 0x7, 0x4, 0x40, 0x200}], "6545424a1dcd70a47d48cc311ea0d422e063cf8255cca449fd9a321011fd12c6e5b98af3f0b2ce63a816aaf492eb6456ed8c96aa06e911d8703f92e88bf351ec602cb54fac840366138d1dd83a99e350fa392d25ea0b89e9a5a0cdc843247880a2b25405c2fd2a58f124b1f02736475d9a10dc46051c5d8440c1e888d00a20cb"}, 0x130) 13:57:50 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x8001, 0x3ff, 0x2, 0x100000000, 0xb, 0x5}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x4800, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x14040, 0x2) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/252) 13:57:50 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x2002) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) [ 608.592834] ptrace attach of "/root/syz-executor.5"[24721] was attempted by "/root/syz-executor.5"[24777] 13:57:50 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0xa, 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x8c469829450b2e5b) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x80000000, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 608.709257] audit: type=1800 audit(1566223070.150:123): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17048 res=0 13:57:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) 13:57:50 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0xe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) recvfrom$x25(r0, &(0x7f00000001c0)=""/116, 0x74, 0x40, &(0x7f00000000c0)={0x9, @remote={[], 0x0}}, 0x12) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)=0xcf278987ed14e577) 13:57:50 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x4]}) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000001c0)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:50 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x480000) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x4, 0x7ff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="10"]}) io_setup(0x5, &(0x7f0000000100)=0x0) fdatasync(r0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_getevents(r2, 0x3879, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f00000001c0)={r3, r4+10000000}) [ 609.015317] Unknown ioctl 1074025526 13:57:50 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x180, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38f37fdba040c4d5415a8d"], 0x0, 0xb}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000240)={r3, &(0x7f0000000180)=""/130}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) connect$netrom(r2, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x48) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000100)={0x82b05a4f5afe4014, 0x2, @raw_data=[0x80, 0x6, 0xffffffffffff8001, 0xbd1, 0x120000000, 0xfff, 0x6, 0x7ff, 0x0, 0x2, 0x0, 0x5, 0x7f, 0x7d, 0x6]}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x42900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000200)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10010000000035) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x1000000, 0x0, 0x0, 0x0, 0x62, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0x28d, &(0x7f0000000240)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe59}, 0x48) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 609.098337] Unknown ioctl 1074025526 13:57:50 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 13:57:50 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x2, 0x80802) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x101, 0xf, 0x4, 0x400000, {r2, r3/1000+30000}, {0x2, 0x8, 0x0, 0x4, 0x0, 0x7fff, "4f9087d7"}, 0x7fffffff, 0x1, @offset=0x6, 0x4}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:50 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 13:57:50 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x81) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x580, 0x140, 0x140, 0x0, 0x498, 0x498, 0x498, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x22}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xf, 0xffffffff}}}, {{@arp={@rand_addr=0xffffffffffffffff, @multicast1, 0xffffffff, 0xff, @mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x4, 0x1000, 0x5, 0x9, 0x78e, 0x80, 'team0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x40}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:scanner_device_t:s0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x2b}, @empty, @rand_addr=0xffffffffffff8708, @local, 0x1, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5d0) ioctl$int_in(r0, 0x2080080040045010, &(0x7f00000000c0)) write$capi20(r0, &(0x7f0000000140)={0x10}, 0xfdce) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)=0xfdfdffff) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x6, 0x100) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000280)={0x6, 0x3f}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x200000, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x8, 0x4911, 0x3ff, 0x0, 0x0, 0x7, 0x80031, 0xe, 0x9, 0x0, 0x8, 0x8, 0x5, 0xffffffff, 0x7fff, 0x7ff, 0x1f, 0x4, 0x6, 0x6, 0x6, 0x5, 0x80, 0x0, 0xfffffffffffffffd, 0x1f5, 0x8, 0x7, 0x100000001, 0x7ff, 0x10000, 0x1, 0x6ac6, 0x8, 0x9, 0x5, 0x0, 0x701, 0x7f5f788d5dd4fd4d, @perf_config_ext={0x1, 0x1}, 0x10002, 0x1290000000000, 0x5, 0x7, 0x8, 0x50218b3d, 0x4}, r1, 0xb, r2, 0x1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000240)=0x6) ioctl$RTC_UIE_ON(r3, 0x7003) setxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000940)='security.SMACK64EXEC\x00', &(0x7f0000000980)='mangle\x00', 0x7, 0x2) 13:57:50 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f00000002c0), 0x1000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) r3 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) dup3(r3, r2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/n/vs/amemthresh\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000001380), 0xfffffe0f) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000001300)='y\x00', 0x2, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vhci\x00', 0x20002) write$vhci(r8, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000001c0)=0x6, 0x4) close(r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:50 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 609.570491] audit: type=1400 audit(1566223071.010:124): avc: denied { map } for pid=24855 comm="syz-executor.2" path="/dev/vga_arbiter" dev="devtmpfs" ino=4 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=chr_file permissive=1 13:57:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:51 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x3, @ipv4={[], [], @loopback}, 0x1}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x13}, @in6={0xa, 0x4e24, 0x0, @empty, 0x7f6f22b8}]}, &(0x7f0000000100)=0x10) 13:57:51 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x101, 0x40000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x80400) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x2}, 0x28, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) capset(&(0x7f0000000100), &(0x7f0000000140)={0x0, 0x1f, 0x0, 0x6, 0xfffffffffffffc00, 0x6}) r1 = memfd_create(&(0x7f0000000680)='/dev/loop#\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r0, 0x0, 0x3d40000000000b) ioctl$LOOP_CLR_FD(r0, 0x4c01) 13:57:53 executing program 5: 13:57:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:53 executing program 1: 13:57:53 executing program 2: 13:57:53 executing program 1: 13:57:53 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x1010, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:53 executing program 2: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000001a40)) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xffffffffffffffff) 13:57:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='7:2\t'], 0x4) 13:57:53 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) 13:57:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:53 executing program 1: 13:57:54 executing program 5: 13:57:54 executing program 2: 13:57:54 executing program 1: 13:57:54 executing program 1: 13:57:54 executing program 2: 13:57:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8000000000001e, &(0x7f00000000c0)=0x2000000000000074, 0x4) 13:57:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 13:57:54 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x20, 0x4100) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400000000001) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:54 executing program 1: 13:57:54 executing program 5: 13:57:54 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200000) fcntl$getown(r1, 0x9) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000100)="2795c797e40414ddf0d52ba02a36a71aba5de2a7a61874cf61562e03bffc1f7a2121181c16bb8361e1ee80a2d245dd9639d6c88c21ffe2be5e3e7d178226ba222d2bb517ba43a76758af22bd319c667122d7af4d44fa", &(0x7f0000000400)=""/4096}, 0x18) 13:57:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:54 executing program 1: 13:57:54 executing program 5: 13:57:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5452, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x40000) 13:57:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='vegas\x00', 0x6) sendto$inet(r0, &(0x7f00000002c0)='\f', 0x1, 0x0, 0x0, 0x0) 13:57:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/127, 0x7f}], 0x1, 0x0) 13:57:54 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$9p_virtio(&(0x7f0000000540)=']\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368653d6e6f6e652c706f73697861636c2c61707072616973652c6673636f6e746578743d73797361646d5f752c686173682c636f6e746578743d73797361646d5f752c736d61636b669994b38450be51e12c00"]) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x7, 0x1) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x81, 0x0, [0x3, 0x9, 0x4, 0x8001]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)=']\x00') r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x8668) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) fsetxattr$security_capability(r0, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [{0x2, 0xdc6}, {0xed83, 0x100}], r3}, 0x18, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x420000, 0x4) bind$vsock_dgram(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) close(r2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000280)={0x3, &(0x7f00000002c0)=[{0x8a, 0x7, 0x9, 0x81}, {0x53, 0x7, 0x6, 0x7}, {0x7ff, 0xc31b, 0xfffffffffffffffc, 0x100000003}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000500)=0x9, 0x4) 13:57:55 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) 13:57:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f00000000c0)=0xffffffff, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13:57:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x40100c000000013) 13:57:55 executing program 4: open(&(0x7f0000000240)='./file0\x00', 0x4240, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x200000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0xfffffffffffffffc}, 0xfffffffffffffeb7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40800, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x100, 0x5, 0x401, 0x80000000, 0x13, 0x2, 0x3f, 0x2, 0x6, 0x9, 0x7f8, 0x400c}) [ 613.665203] audit: type=1800 audit(1566223075.110:125): pid=24991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17069 res=0 [ 613.793986] audit: type=1800 audit(1566223075.240:126): pid=24991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17069 res=0 13:57:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0), 0x3e3) 13:57:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:55 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(0x0, 0xfffffffffffffe6d) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000240)=0x100000000, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400009) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) write$cgroup_subtree(r3, &(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYBLOB="bd3758a2", @ANYRES64=0x0, @ANYPTR64, @ANYPTR], 0x2e) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="563ab06bca45a2a2b7527f03e557e00fe81e93dde68a8e1ca49b91dd5252ac0b5cb435a0bf4cb74d709454b93efc9d359c85f4a12ae0255576dfcaec10c44680d48de3ea6b160f57221962304f0108c8a222f626fa27caf3faf7229559d0841676e640e1e8a42393e8c9524ab09448fac0cb53354c41f64f831402e985ee4fba96e72800c63cbb90189d1b61dd89f79cdcb15b", 0x93, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r5, 0x40) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:57:55 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x400}}, 0x0, 0x1}, 0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:56 executing program 2: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 13:57:56 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:56 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfff, 0x40) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x19}, @loopback}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0xffffffffffffffba}], 0x1) 13:57:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") creat(0x0, 0x0) getpgid(0x0) prlimit64(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0xe9) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000001c0), 0x4) r3 = open(&(0x7f0000000100)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099ba) sendfile(r2, r3, 0x0, 0x1000000000000fe) 13:57:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffe63) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 615.277395] kvm: emulating exchange as write 13:57:57 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847b", 0x49}], 0x1}, 0x0) 13:57:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:57 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000180)={0x5b, 0x7fff, @name="f6b1a4031b28bb617ba01ea63934a216deffe60e1e2353a1241d89add99e0b49"}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0xffffffffffff7ca0, 0x2}, {0x80000000, 0x6}], r1}, 0x18, 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0xf579, @loopback, 0x1}}, 0xfffffffffffffff9, 0x3, 0x1, 0x8, 0xfffffffffffffeff}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={r3}, &(0x7f0000000540)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000005c0)={&(0x7f0000000580)=[0x2], 0x1, 0x400, 0x4, 0x4550, 0x6, 0x2, {0xfffffffffffffff7, 0xb44, 0x62e289cb, 0x7, 0x1c, 0x198b80000000000, 0x3, 0x1ff, 0x2, 0x20, 0x9, 0x80000000, 0x3ff, 0x8, "5c34348b8f425b38dfdfa2540e6c80a7959771543e23ce64aefc916f0d56ac7f"}}) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) sync_file_range(r0, 0x1f, 0x8, 0x4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f00000000c0)={0x8, 0x3, 0x1}) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:57 executing program 2: r0 = memfd_create(0x0, 0x0) dup(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x607c) connect$inet6(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) r3 = getpid() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000280)) r5 = dup2(r4, r4) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1}, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={[], 0x0, 0x0, 0x100000001, 0x1, 0x0, r3}) semget$private(0x0, 0x1, 0x59e) sendto$inet(r4, &(0x7f0000000000), 0x128eca80, 0x10, 0x0, 0xfffffffffffffdb9) fcntl$addseals(r0, 0x409, 0x0) 13:57:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:57 executing program 5: r0 = timerfd_create(0x9, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) 13:57:57 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x4, {0x8, 0x7, 0x2, 0xffffffff}}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000140)) 13:57:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 13:57:57 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f0000000440)="02", 0x1) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 13:57:57 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000040)}]) 13:57:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x3f, 0x795, 0x1, 0x4, 0x0, 0xff, 0x50001, 0x2, 0x80000001, 0x1ff, 0x3, 0x9, 0x2, 0x5, 0xffff, 0x3ff, 0x80000000, 0x9, 0x3, 0x2, 0x8, 0xffff, 0x6, 0x2, 0x7fffffff, 0x8, 0x4, 0x8, 0x7ff, 0x400, 0x100000000, 0x28000, 0xfffffffffffffffa, 0xff, 0xffffffffffffffff, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x73669093431f958a, 0x6f, 0x100000000, 0x31a465df78c9c248, 0xf7da, 0x9, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x30, r1, 0x0) lseek(r0, 0x0, 0x7) sendfile(r2, r2, &(0x7f0000000440), 0x20) sendfile(r2, r2, &(0x7f0000000100), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0/file0\x00', &(0x7f00000003c0)='./file0/file0/file0\x00') r3 = dup3(r0, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) fcntl$setown(r5, 0x8, r6) sendfile(r4, r5, 0x0, 0x8000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x5004, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file1\x00', &(0x7f00000002c0)='bpf\x00', 0x10000001910823, 0x0) umount2(&(0x7f0000000540)='./file0/file0/file0\x00', 0x100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') 13:57:58 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x1bbd]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/72, 0x48}], 0x1, 0x0) 13:57:58 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 13:57:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 13:57:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1a30f7ffad292d4, 0x4) 13:57:58 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, "bc1e3835852a3fd39a443c04389988f64bef2b1f887422d6e52374599ad129ed78aed7d7133d1ce7504d5da7f5c094781885459eccfa466dfa7b1f1a271cfe95638de9295e876d7fa848b99c36d015d5fea21544214d70"}, 0xffffff82) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000007c0)='ip6tnl0\x00', 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) 13:57:58 executing program 2: r0 = memfd_create(0x0, 0x0) dup(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x607c) connect$inet6(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) r3 = getpid() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000280)) r5 = dup2(r4, r4) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1}, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={[], 0x0, 0x0, 0x100000001, 0x1, 0x0, r3}) semget$private(0x0, 0x1, 0x59e) sendto$inet(r4, &(0x7f0000000000), 0x128eca80, 0x10, 0x0, 0xfffffffffffffdb9) fcntl$addseals(r0, 0x409, 0x0) 13:57:58 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x26a880) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000200)='bdev$\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffed5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) fstatfs(r0, &(0x7f0000000140)=""/102) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000001c0)={0x3, 0x102, 0x1, {0x6, 0xe2, 0x2}}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000100)={{0x4, @addr=0xffffffffffff8000}, 0x8, 0x3, 0x3}) 13:57:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000380)=""/39, 0x23, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, 0xffffffffffffffff) 13:57:58 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000000c0)=0xfffffe0a) 13:57:58 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, r1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x1000, 0x400000) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000100)={0x4, 0x3, 0x100000001}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:57:59 executing program 4: r0 = open(&(0x7f0000000280)='./file0\x00', 0x408000, 0x11) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xffffffffffffffe1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8890) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0xa) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'team_slave_1\x00', 0x800}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000200)) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r5, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r6 = pkey_alloc(0x0, 0x2) pkey_free(r6) r7 = dup(r4) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r8, 0x6, 0x6}, 0xc) close(r3) ioctl$VT_ACTIVATE(r2, 0x5606, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 617.576904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.626298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:57:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:57:59 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="2f1670e5ed5a168e14c5eadf8cfe5b9e5c3a", 0x12}], 0x10e429f75b8bfb68, &(0x7f0000000340)=ANY=[@ANYBLOB='d\bsable_ext_identify,background_gc=on,norecoveusrjquota=/dev/vhci\x00,eumd>', @ANYRESDEC=r0, @ANYBLOB=',smackfsroot=/dev/vhci\x00,smackfstransmute=,\x00']) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 617.770921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.842395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.890559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:57:59 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x689, 0x2}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0x3, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x2a0ffffffff, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff83, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3801, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0xf0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 13:57:59 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, r3}, 0xc) write$vhci(r1, &(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, "9d107e8011661ede809430361e2fa96b7894ec069c89719e3daf7771dcc6145cede0d149ae0505b7df66ecef2ffb16fd54457d333c582e6d05db78175c66e59d4ffd6b5c3cd16e942d38f57edb9871a16071d1cb0fa45cbbd07fbfb3eceff7a67fcf70729daa60d70295fb0da6aca56c0e039516d00db17167335b03e2fd1ddebfd23ba987d83e88e62b545f57f87842fdb9bc4f39a600f77dbff8adea129038a9dd5e0d8a413c063acc5126836646aa53b4032fd208bc829633648e93d64913890e56210d28b7a0dd9ac1d0"}, 0x4a8) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:59 executing program 1: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f00000002c0)="24000000210099f0003bf90000ed190e020008160004000000ba0080080002007fbcfe6f", 0x24) [ 618.248410] syz-executor.5 (25116) used greatest stack depth: 23808 bytes left 13:57:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001c00)="11dca5055e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$rfkill(r1, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x5460, &(0x7f0000000000)) 13:57:59 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x40, 0x8100) recvfrom$packet(r0, &(0x7f00000001c0)=""/71, 0x47, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:57:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vxcan1\x00', 0x400}) 13:57:59 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe473f070") r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) syz_open_procfs(0x0, &(0x7f0000272000)) 13:57:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) syslog(0x0, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:57:59 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x218d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x101a00, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x9, 0x5, 0x3, 0x401, 'syz1\x00', 0x7fff}, 0x2, 0x100, 0x8, r2, 0x2, 0x6, 'syz0\x00', &(0x7f0000000140)=['\x00', '/dev/vhci\x00'], 0xb, [], [0x1f, 0x9, 0x200, 0x6]}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) write$vhci(r1, &(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, "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"}, 0xff) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000002c0)={0x7, 0x4, 0x1}) 13:57:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0x200001000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 13:58:00 executing program 5: syz_open_dev$vbi(&(0x7f0000000900)='/dev/vbi#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x24, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(&(0x7f0000000040)=[{}], 0x75, 0x0) 13:58:00 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffb9, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 13:58:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 13:58:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f0000000080)=""/246) [ 618.599215] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.636226] bridge0: port 2(bridge_slave_1) entered disabled state 13:58:00 executing program 5: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x8, &(0x7f0000000100)) 13:58:00 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, "274351bd26713e52c1f744bdb783a0da41396485e14288093909ff89ca3788d2775f41c61f1423d064d6c60bce5a37620f8e84e861fba540872d331c5fd19cebad5303c968b1e5eb6e9f57"}, 0x4c) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:00 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x2, r0, 0x0) 13:58:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x794063aff7311377, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001d001304000000000000000048000200637473286374722874776f666973682929000000000000d74c00000000000000000000000000000000000000000000000000000000c4779a85762e19298c247c4c000000"], 0x58}}, 0x0) 13:58:00 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x2f00}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x1c4) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() stat(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB]}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) msgget$private(0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000480)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000000)={@remote}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)) readv(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001340)=""/19, 0x13}], 0x4) 13:58:00 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)=0xffffffffffffff43) 13:58:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe473f070") getsockopt$rose(r1, 0x104, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:58:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000080)=""/246) 13:58:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:00 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:00 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)) 13:58:00 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)) 13:58:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:01 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 13:58:01 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:01 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) prctl$PR_SET_FPEXC(0xc, 0xd4cec71f63567f54) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000080803, 0x1) connect$inet6(r0, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sysfs$3(0x3) socketpair(0x10, 0x0, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) 13:58:01 executing program 1: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3f) ptrace$cont(0x9, r1, 0x0, 0x12) 13:58:01 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f00000006c0)="f481c0a7c9c5f0f114dac85881cfb232e95abeef4e612897e9d9646dddb33d32eb2a2146799ad1ec69b820dd2fcb98f217c03ffca47b7b73176216e48615b3f6e1b673c1b7796f5b185390690ae8ca13178ebb5bf6e1ef29d6efe484e29f0ac4f2a5346b2f4c0ac1403fd1c0c4775844d785c739861c", 0x76, 0xfffffffffffffffb) keyctl$invalidate(0x15, r3) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) read$eventfd(0xffffffffffffffff, 0x0, 0xfffffffffffffe1e) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0xcf) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a40)) fcntl$getown(r5, 0x9) process_vm_writev(0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000240)}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000740)=""/142, 0x8e}, {&(0x7f0000000940)=""/69, 0x45}, {0x0}], 0x6, &(0x7f0000002000)=[{&(0x7f00000003c0)=""/23, 0x17}, {&(0x7f0000001d80)=""/141, 0x8d}, {0x0}, {&(0x7f0000001f00)=""/31, 0x1f}, {&(0x7f0000001f40)=""/185, 0xb9}], 0x5, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x2) sendmmsg(r5, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)={'L+', 0x7}, 0x28, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000240)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000280)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[]}}, 0x0) io_setup(0x10000, &(0x7f0000000500)=0x0) io_submit(r6, 0x5, &(0x7f0000001e40)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x4, r4, &(0x7f0000000800)="18ae04f6bd5234486a340d596cd0ad2cebe77635dd2a631237bd887a733cbb5d6b45ef23e774307ffc92ee4aa94ad96eab4c0a05391c1811d7fdd039e204eb19f3500b80f55add512682f5746023318b94671394b83ffb9456efdf9dcc7936080c4bfbad10aeff96ab3ab97e04dfb7abadb23729e273a45d94390f5e8b02a8ee225cb95bdace23dc7fc9515b9a9612a7ae893f8f30ea9971a1fc0de94004b35201a29ad2204416e6bbde93e85ea73faa8e1b0d02a0296a653d9489ffa6de1a85a72eb5e679c20422e620382089dacb8487159637a8601872eab8", 0xda, 0x9, 0x0, 0x2, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x3ff, r1, &(0x7f0000000a80)="b13d5509a50f25031feed0edaa47e54ba8bebea883352edb24d2043f85d83cae5543f39da8185bb054becaede4413cee3eb5e9939ea3624d7f0b516b943167b5b3603b5409b931daf9b323a08c5c8e54d599dfef16e1faf0221d3819e868de25a5871846c443eeb2ec25cd1a907f09c3020c235370632fb5711c4f9e", 0x7c, 0x9, 0x0, 0x1, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0xcc6, r5, &(0x7f0000002080)="69f32de9fc6f6222eefed5be5fe4ce551830f1f26bd386ec9ca65c3632d8816cd74170c59dc3b1da20d87ea6544f598d3825666134537fb5bf36b1bec582323bfa5f934e665d62d6b10291033ba2", 0x4e, 0xff, 0x0, 0x0, r0}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x1, 0x1ff, r4, &(0x7f0000001bc0)="d655412f749abaaf0a8fb2ad9450d965a2ab18f7adcdf9f9cf360087a7cc7291976c27c9defd457176afbd44d801ed13ccd709a6493f05cae87a6b2f82f686710c8b8314cad0431d3f3c4f97fb2eed47e4e6d3342f388c52457355388c51916f8e7ca26d52c423e3569404bcc4206e52127758d85f346daf3ee9ca147b174a729baecc4712143d25203109daeee4c3eb743c67b3a8ed2b7492a0c1ff80", 0x9d, 0x9, 0x0, 0x2}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000001c80)="a5247f7d6cb7b5b3da5c362647c31b902e4ed89bb67a0f201cc84ea10d1c8ef68e4c7022a48d1125e38c302a1aa99cc99395e23bda56e3be5452765e68f59ef2d65ddbe0477ceca5f79a301f37145dbccf03349781dae82b198c7819d8effbda53790f20b8b12458484e1bca77ed6f73b291884c3b404aa852c500623e53c04b03baa580fa00f07ce7e7e0c04c8f171cb18633b8a130c887219b3fb9ed96cb1914af59023cccd81daf038ecf452f18a6d753c2108e11c797d1f2fb790a01f0b5d9a5576b85d9", 0xc6, 0x5, 0x0, 0x6, r2}]) read(r4, &(0x7f0000000400)=""/162, 0xa2) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000680)) 13:58:01 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x9) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 13:58:01 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x6}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00'}) 13:58:01 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/29, &(0x7f0000000100)=0x1d) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x10000, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f00000001c0)=0x4155964273c5129) 13:58:01 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000001c0)=""/121, &(0x7f0000000240)=0x79) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) getdents64(0xffffffffffffffff, &(0x7f0000000940)=""/216, 0xd8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sendfile(r0, r1, 0x0, 0x10000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) epoll_create1(0x80000) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000004c0)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x1, &(0x7f0000000a40)) fchdir(r1) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c}, 0x1c}}, 0x0) [ 620.560278] protocol 88fb is buggy, dev hsr_slave_0 [ 620.565408] protocol 88fb is buggy, dev hsr_slave_1 13:58:02 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x81) write$vhci(r0, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 620.616246] audit: type=1800 audit(1566223082.060:127): pid=25319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16913 res=0 [ 620.680453] audit: type=1804 audit(1566223082.090:128): pid=25320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir242294969/syzkaller.EbIUZi/753/file0" dev="sda1" ino=16913 res=1 13:58:02 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0xfffffffffffff1f5, 0x1}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 621.050252] protocol 88fb is buggy, dev hsr_slave_0 [ 621.055405] protocol 88fb is buggy, dev hsr_slave_1 13:58:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 13:58:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') fcntl$setpipe(r0, 0x407, 0x6) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) syslog(0x3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x3, 0x0, 0x0, 'sed\x00', 0x20, 0x4}, 0x2c) 13:58:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) [ 621.120148] protocol 88fb is buggy, dev hsr_slave_0 [ 621.125337] protocol 88fb is buggy, dev hsr_slave_1 13:58:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) 13:58:02 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x9) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) 13:58:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)) [ 621.282298] protocol 88fb is buggy, dev hsr_slave_0 [ 621.288054] protocol 88fb is buggy, dev hsr_slave_1 13:58:02 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d3d29be507c0fed4a5098034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000140)="8177d0") ptrace$cont(0x7, r0, 0x0, 0x0) 13:58:02 executing program 2: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000023008163e45ae08700000000060f0ec0000000bc4cc91b4dd65b2f0580cb7023f52a556d1cd4f1cbf90a", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x9, 0x0, 0x47, 0x36e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffff38, 0x0, 0x0, 0x3, 0x0, 0x2548, 0x6, 0x8001, 0x0, 0x1, 0x6, 0x8, 0x6, 0x0, 0x100000000, 0x3, 0x0, 0x8000, 0x6797, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 13:58:02 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x81}]) 13:58:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) [ 621.392647] audit: type=1400 audit(1566223082.830:129): avc: denied { set_context_mgr } for pid=25350 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 621.393809] binder: 25350:25353 ioctl c018620c 200000c0 returned -22 [ 621.417232] ptrace attach of "/root/syz-executor.2"[25352] was attempted by "/root/syz-executor.2"[25354] [ 621.428865] binder: 25350:25355 ioctl c018620c 200000c0 returned -22 [ 623.120609] net_ratelimit: 4 callbacks suppressed [ 623.120615] protocol 88fb is buggy, dev hsr_slave_0 [ 623.130666] protocol 88fb is buggy, dev hsr_slave_1 [ 623.200145] protocol 88fb is buggy, dev hsr_slave_0 [ 623.205286] protocol 88fb is buggy, dev hsr_slave_1 [ 623.360271] protocol 88fb is buggy, dev hsr_slave_0 [ 623.365384] protocol 88fb is buggy, dev hsr_slave_1 [ 623.370508] protocol 88fb is buggy, dev hsr_slave_0 [ 623.375674] protocol 88fb is buggy, dev hsr_slave_1 [ 624.720213] protocol 88fb is buggy, dev hsr_slave_0 [ 624.725281] protocol 88fb is buggy, dev hsr_slave_1 [ 628.880180] net_ratelimit: 18 callbacks suppressed [ 628.885193] protocol 88fb is buggy, dev hsr_slave_0 [ 628.890258] protocol 88fb is buggy, dev hsr_slave_1 [ 629.360228] protocol 88fb is buggy, dev hsr_slave_0 [ 629.365456] protocol 88fb is buggy, dev hsr_slave_1 [ 629.440275] protocol 88fb is buggy, dev hsr_slave_0 [ 629.445463] protocol 88fb is buggy, dev hsr_slave_1 [ 629.600297] protocol 88fb is buggy, dev hsr_slave_0 [ 629.605460] protocol 88fb is buggy, dev hsr_slave_1 [ 629.610562] protocol 88fb is buggy, dev hsr_slave_0 [ 629.620135] protocol 88fb is buggy, dev hsr_slave_1 13:58:12 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x3, 0x200000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000240)=0x40, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getcwd(0x0, 0xfffffffffffffe6d) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400009) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) write$cgroup_subtree(r3, &(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYBLOB="bd3758", @ANYRES64=0x0, @ANYPTR64, @ANYPTR], 0x2d) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) keyctl$set_timeout(0xf, 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:58:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:58:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 13:58:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:12 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xf81, 0x123902) getdents(r1, &(0x7f0000000100)=""/100, 0x64) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:12 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) setsockopt(r1, 0x0, 0x8, &(0x7f0000000380), 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffc) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0, &(0x7f0000000200)={0x77359400}) 13:58:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:58:12 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$vsock_dgram(0x28, 0x2, 0x0) 13:58:12 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 13:58:12 executing program 5: r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 13:58:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x80,\x88E\x00', 0x20000005001}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000055d8c257e377d65f7d229049d28852da2d6a8870fa37586ee8f7c494bef791454859eede7a428ec12d45349871ba430242ec7008a882b476610cc308df563ceac25951ee6834c308baef409736e1d3e6f4e7b6836e8b9998a7b5595c07590b87ed80e20da3589a6bd6541834fe80615a9ec781d8ca206034f0143118efb7a41df142d3d278ab90b20a7174732454176a557ac8cd8882b8d9e94ce2bc15b4"], 0x28}}, 0x0) 13:58:12 executing program 4: r0 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x80000000, &(0x7f0000000080)=""/70) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) 13:58:13 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000440), &(0x7f0000000080)="1a"}, 0x20) 13:58:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @fd, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000180)={0x8, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0x0, r0) 13:58:13 executing program 1: umount2(0x0, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xbffffffe) [ 631.607361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:58:13 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0), 0x4) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x3) 13:58:13 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 631.679511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 631.709704] futex_wake_op: syz-executor.1 tries to shift op by 4095; fix this program 13:58:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x300300, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b409000028840002000000000000000000ffffe0000002ff020000000000000000000000780009040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb000000000000"], 0x0) 13:58:13 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002280)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000022c0)="772e723d66969c67e319dbe76ff376f0909fcf248187f5cd329e7c4dda80e240473edc8cad4551a9ed04f6cc39344cdc3cbead12ac4d6733c9af60e0cdf3cbb89a0b30a6e034736b04071c3ed132f55bf48ff9644b19472ff23678275dc4d4aec94e5087c35facdac85b71d5840738c37c36055d8b125f66f30ac4dfe2fdb8fb1fbd81682d6919eb3229fddb198c8810f90b0c0bcdcd5ebe5287b0350ad9b8fe39b25d785a09db348fe3b0c5639bbe4038a979b97977b97a52244d2f0d3352afc0b8a26ed58bc9c2c7e8886d") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0xa5, &(0x7f0000002240)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000001c0)={0x2, 0x0, 0x2080, {0x6000, 0xd000, 0x3}, [], "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", "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"}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)=0x4) 13:58:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) 13:58:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000200)={0xfffffffffffffcf4, 0x0, 0x0, 0x1cd, 0xfdfd, 0x0}) 13:58:13 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/45, 0x2d}], 0x5, &(0x7f0000000400)=""/4096, 0x1000}, 0x40000000) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001440)={@empty, @local, @empty, 0xf34a, 0x94e, 0x111aaa79, 0x500, 0x4, 0x10000, r3}) 13:58:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) getpgrp(0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0xf0ff7f, 0x0, 0x0}], 0x1, 0x0) 13:58:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syslog(0x3, 0x0, 0x0) 13:58:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe473f070") 13:58:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001c00)="11dca5055e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$rfkill(r1, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) 13:58:14 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x20) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4011400}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x214, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x144, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f62590b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33c}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5220}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x8041}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhci\x00', 0x141001) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$KVM_NMI(r0, 0xae9a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) getpgrp(0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:14 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x3ff, &(0x7f0000000140)=0xfffffffffffffd8a) readv(r0, &(0x7f0000000180), 0x0) 13:58:14 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x66b20fcee29375bd) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x10000) epoll_create1(0x80000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000004c0)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$tipc(0x0) 13:58:14 executing program 2: 13:58:14 executing program 5: [ 632.668143] audit: type=1800 audit(1566223094.110:130): pid=25503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17149 res=0 13:58:14 executing program 2: 13:58:14 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x800, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, &(0x7f0000000140)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:14 executing program 5: 13:58:14 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) 13:58:14 executing program 5: 13:58:14 executing program 2: [ 632.851105] audit: type=1804 audit(1566223094.150:131): pid=25510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir242294969/syzkaller.EbIUZi/764/file0" dev="sda1" ino=17149 res=1 13:58:14 executing program 2: 13:58:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) getpgrp(0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:14 executing program 5: 13:58:14 executing program 1: 13:58:14 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000200)={0x80000, 0x0, [0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x53]}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r3 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x20000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x9}}, 0x20) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={r1, 0x0, 0x4, 0x67, 0x395}) close(r2) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000380)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r2, 0x243, 0x6, 0x101, 0x8}) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0)={0x0, 0x2}, 0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000280)=0x0) ptrace$setsig(0x4203, r4, 0x8, &(0x7f00000002c0)={0x24, 0x7ff, 0xff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:14 executing program 2: 13:58:14 executing program 5: [ 633.427605] audit: type=1804 audit(1566223094.870:132): pid=25540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir242294969/syzkaller.EbIUZi/764/file0" dev="sda1" ino=17149 res=1 [ 633.459752] syz-executor.1 (25503) used greatest stack depth: 23536 bytes left 13:58:15 executing program 5: 13:58:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:15 executing program 2: 13:58:15 executing program 1: 13:58:15 executing program 3: r0 = gettid() r1 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) close(r1) sched_getattr(r0, &(0x7f0000000180)={0x30}, 0x30, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x100000000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r3, 0x20}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:15 executing program 2: 13:58:15 executing program 1: 13:58:15 executing program 5: 13:58:15 executing program 1: 13:58:15 executing program 4: syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x20000) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x81, 0x40001) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/l2cap\x00') r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:15 executing program 2: 13:58:15 executing program 5: 13:58:15 executing program 1: 13:58:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:15 executing program 5: 13:58:15 executing program 2: 13:58:15 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x40) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) 13:58:15 executing program 1: 13:58:15 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x101000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:15 executing program 2: 13:58:15 executing program 5: 13:58:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:15 executing program 5: 13:58:16 executing program 1: 13:58:16 executing program 2: 13:58:16 executing program 5: 13:58:16 executing program 1: 13:58:16 executing program 5: 13:58:16 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r0 = semget$private(0x0, 0x2, 0x1) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000001c0)=""/4096) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x80000) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 635.120160] net_ratelimit: 22 callbacks suppressed [ 635.120166] protocol 88fb is buggy, dev hsr_slave_0 [ 635.130377] protocol 88fb is buggy, dev hsr_slave_1 13:58:16 executing program 1: 13:58:16 executing program 2: 13:58:16 executing program 5: 13:58:16 executing program 4: ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:16 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @mcast2, 0x6}, 0x1c) set_thread_area(&(0x7f0000000140)={0xfffffffffffffffb, 0x20000800, 0xffffffffffffffff, 0x7f1, 0x1, 0x200005, 0x1ff, 0x8, 0x1ff, 0x1000}) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:16 executing program 2: 13:58:16 executing program 1: 13:58:16 executing program 5: 13:58:16 executing program 5: 13:58:16 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x20000) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) [ 635.454602] audit: type=1400 audit(1566223096.900:133): avc: denied { map } for pid=25632 comm="syz-executor.3" path="/dev/vbi5" dev="devtmpfs" ino=15438 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:v4l_device_t:s0 tclass=chr_file permissive=1 13:58:16 executing program 1: 13:58:16 executing program 2: 13:58:17 executing program 2: 13:58:17 executing program 1: 13:58:17 executing program 5: [ 635.600304] protocol 88fb is buggy, dev hsr_slave_0 [ 635.606003] protocol 88fb is buggy, dev hsr_slave_1 [ 635.682496] protocol 88fb is buggy, dev hsr_slave_0 [ 635.687792] protocol 88fb is buggy, dev hsr_slave_1 13:58:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) [ 635.840120] protocol 88fb is buggy, dev hsr_slave_0 [ 635.845228] protocol 88fb is buggy, dev hsr_slave_1 [ 635.850330] protocol 88fb is buggy, dev hsr_slave_0 [ 635.855371] protocol 88fb is buggy, dev hsr_slave_1 13:58:17 executing program 5: 13:58:17 executing program 1: 13:58:17 executing program 2: 13:58:17 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:17 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x400042) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000180)={0x3, 0x100000001, 0xf1d, 0x3, 0x4, 0x0, 0x7}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10040, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x408000, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:17 executing program 1: 13:58:17 executing program 5: 13:58:17 executing program 2: 13:58:17 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x4, 0x1, 0x0, 0x5, 0x0, 0x5, 0x2c484, 0x1, 0x1, 0xffffffff, 0x8000, 0x75, 0x9, 0x247, 0x0, 0x6, 0x375cb827, 0x100000001, 0x3, 0x8, 0x8, 0xfff, 0x8, 0x5, 0x8, 0x4, 0x7, 0x9f6, 0x5, 0xff, 0x0, 0x28, 0x180000, 0x1, 0x0, 0x2, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0xe28}, 0x8000, 0x3a2, 0xf, 0x1, 0x4, 0x5}, r2, 0x7, r0, 0x9) 13:58:17 executing program 1: 13:58:17 executing program 5: 13:58:17 executing program 2: 13:58:17 executing program 1: 13:58:17 executing program 5: 13:58:17 executing program 2: 13:58:18 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:18 executing program 1: 13:58:18 executing program 5: 13:58:18 executing program 2: 13:58:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:18 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0xb, 0x80000000, 0x6598, 0x4800}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000240)={0x2}, 0x1) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x2, 0x200102) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x84) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000200)=0x1) 13:58:18 executing program 1: 13:58:18 executing program 5: 13:58:18 executing program 2: 13:58:18 executing program 5: 13:58:18 executing program 1: 13:58:18 executing program 2: 13:58:18 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000001c0)=0x44) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0x4c, @rand_addr="8d3addef7c18fb16ffbd5465910243dd", 0x100}}, [0x3, 0x8, 0x8, 0xffffffff80000001, 0x8, 0x40, 0x3, 0x2, 0x81, 0xba, 0x5, 0x100000, 0x450b5377, 0x3, 0x1]}, &(0x7f0000000300)=0x100) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:18 executing program 1: 13:58:18 executing program 5: 13:58:18 executing program 2: 13:58:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:19 executing program 2: 13:58:19 executing program 1: 13:58:19 executing program 5: 13:58:19 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x2c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1, 0xd2, "e439ff0290d1cac037e9d64b2068ec9b2bf2b2ec97f24e1bf882c04e7f1c47a8ef02ee9e494390fcb5848f95aa1f1914eeac5cbe779230968d059968db45c58d99031f244dbebeafd67c40b00ef16931a8b49e871cae5b05bdc2bea73b818628dda3326d7a710bc8f80fe2be079db039080dcb49cb4b4d9269290b58d507127ff24f9d8ccf41b2662f48bd0b2c861ff1b7a7b267cc43ed367473d86db4e1cb5493fba5925251006329258cbe0667f80639a9122d421c24b18b4f22211964079127971c1532d96ca2b5c6ddacbf42fb4986b4"}, &(0x7f0000000300)=0xda) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:19 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x40800) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34b5, 0x0, 0x101, 0x8000, 0x400, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x5e}, 0x0, 0xffffffffffffffff, r1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4c0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) write(r2, &(0x7f0000000180)="f6d5c5bdb824277c109fd3301f61ec45b26697f94fc01132836ae23ae42e070829d7fee6e33b17f63395e8ff7fe78555e21d1ae0d334a0c6c157f7cc531e1725d7b58d9ac15f123c39b76933bfdbcc55914519133247fcfad43e1ce36378e0c16912", 0x62) 13:58:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:19 executing program 2: 13:58:19 executing program 5: 13:58:19 executing program 1: 13:58:19 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x7c6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) 13:58:19 executing program 2: 13:58:19 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) setpgid(r0, r1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:19 executing program 5: 13:58:19 executing program 2: 13:58:19 executing program 1: 13:58:19 executing program 5: 13:58:19 executing program 2: 13:58:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) symlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0) ioctl(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:58:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp\x00') r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 13:58:20 executing program 2: clone(0x4001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000089a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000a9e000/0x2000)=nil) open$dir(0x0, 0x404, 0x16) 13:58:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:20 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffff882, 0x100) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/186}) sendto$ax25(r1, &(0x7f0000000100)="f737f95b392f95651bc09b59f843421f8c5de671dad18b37f30e64b4ab9849f37e5b9dfcd4307ddcf8ce88b21ebbcb8089215757b8828336a54039fd226ef23f655ed9070b513b6a709c90cca13383a07ef5db0075566ba379425ff0479fb0b93e3d", 0x62, 0x80, &(0x7f0000000180)={{0x3, @null, 0x6}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x5f55759d158bb887) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'security.', 'em1ppp1\x00'}, &(0x7f0000000280)='\x00', 0x1, 0x1) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:20 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000015) 13:58:20 executing program 2: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffa6c) mknod(&(0x7f0000000000)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ptrace(0x11, r0) 13:58:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:20 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x7c6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) 13:58:20 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) setpgid(r0, r1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:20 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = dup(r0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x5) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000001c0)={0x200000000000000, 0x2, 0xe1, 0x2, 0xb}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x503400, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000000c0)) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) setpgid(r0, r1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:21 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x1cd) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:21 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) setpgid(r0, r1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0xb, 0x80000000, 0x6598, 0x4800}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000240)={0x2}, 0x1) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x2, 0x200102) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x84) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000200)=0x1) 13:58:21 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)='/dev/vhci\x00', 0xffffffffffffffff}, 0x30) fcntl$setown(r0, 0x8, r1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x84000) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:21 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:22 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) socket$netlink(0x10, 0x3, 0xd) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:22 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:22 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd82, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800000, 0x1d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1f, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x418, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',blksize=0x0000000000000a00,default_permissions,max_read=0x0000000000000007,blksize=0x0000000000000400,default_permissions,max_read=0x0000000000000006,euid<', @ANYRESDEC=r3, @ANYBLOB="ebecd6ec9779"]) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:22 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:22 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:22 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000340)={0x2000000000000001, &(0x7f00000001c0)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000240)={r2, 0x10}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000080)={0x1000, 0x2, 0x10000, 0x5, 0xbb6}) timerfd_settime(r1, 0x0, &(0x7f00000000c0), &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:22 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x4, 0x1, 0x0, 0x5, 0x0, 0x5, 0x2c484, 0x1, 0x1, 0xffffffff, 0x8000, 0x75, 0x9, 0x247, 0x0, 0x6, 0x375cb827, 0x100000001, 0x3, 0x8, 0x8, 0xfff, 0x8, 0x5, 0x8, 0x4, 0x7, 0x9f6, 0x5, 0xff, 0x0, 0x28, 0x180000, 0x1, 0x0, 0x2, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0xe28}, 0x8000, 0x3a2, 0xf, 0x1, 0x4, 0x5}, r2, 0x7, r0, 0x9) 13:58:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:22 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) [ 641.360359] net_ratelimit: 20 callbacks suppressed [ 641.360365] protocol 88fb is buggy, dev hsr_slave_0 [ 641.371002] protocol 88fb is buggy, dev hsr_slave_1 13:58:22 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x4, 0x1, 0x0, 0x5, 0x0, 0x5, 0x2c484, 0x1, 0x1, 0xffffffff, 0x8000, 0x75, 0x9, 0x247, 0x0, 0x6, 0x375cb827, 0x100000001, 0x3, 0x8, 0x8, 0xfff, 0x8, 0x5, 0x8, 0x4, 0x7, 0x9f6, 0x5, 0xff, 0x0, 0x28, 0x180000, 0x1, 0x0, 0x2, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0xe28}, 0x8000, 0x3a2, 0xf, 0x1, 0x4, 0x5}, r2, 0x7, r0, 0x9) [ 641.840093] protocol 88fb is buggy, dev hsr_slave_0 [ 641.845170] protocol 88fb is buggy, dev hsr_slave_1 [ 641.920179] protocol 88fb is buggy, dev hsr_slave_0 [ 641.925298] protocol 88fb is buggy, dev hsr_slave_1 13:58:23 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:23 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800211}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@deltfilter={0x224, 0x2d, 0x404, 0x70bd2b, 0x25dfdbff, {0x0, r1, {0xfff7, 0xfffe}, {0xffff, 0x7}, {0xe, 0x9}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1e8, 0x2, [@TCA_BPF_ACT={0x148, 0x1, @m_ife={0x144, 0xd, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_DMAC={0xc}, @TCA_IFE_TYPE={0x8, 0x5, 0x9}, @TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_DMAC={0xc, 0x3, @dev={[], 0x14}}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}]}, {0xfc, 0x6, "b4b1242a33962a1384dc1dd303cf833407eb869eb27e4bb213013fe4678b9856592381382802e7563600dd3aed75a4c22d89b282a5fdbc0d6b63f65242d10ffdd392f1226572ec397c4c968ef78dcf9697d5b4e33fc3904c0dedfd3f3321929dd0bb1b32302ace2602711d7ea003916ab0dadadedcfae3c9f7fbc415990eb016b4c0aa845806d16fe479fa23a454ae809f13b28eb67872fa4a2dc33d1060bf64138b1873f13e6d2764996778cdf89df2c791187bf01f7f9170043d9b245efe19fc3a3ee9e78baf5861799dbab6681773f16b040b50a65567d9ce00aa80369576db918d8c68bd0a41d9f65c7d514012aa57721a9e18cba0f3"}}}}, @TCA_BPF_ACT={0x58, 0x1, @m_skbedit={0x54, 0x11, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xbf, 0x1, 0x7, 0x2, 0x7}}]}, {0x1c, 0x6, "4fb65b73002c3f7b5650818aaec4ca8ec7d9647708e5e4f5"}}}}, @TCA_BPF_OPS={{0x8, 0x4, 0x7}, {0x3c, 0x5, [{0xc0000, 0xfff, 0x6, 0x5}, {0x7fff, 0x8, 0xffffffffffffff7e, 0x1}, {0x3, 0xfa, 0x7}, {0x2, 0x401, 0xa56, 0x6}, {0x4, 0x7, 0x0, 0x3}, {0xb1, 0x5, 0x4, 0x9}, {0x9, 0x2, 0x7f, 0x8001}]}}]}}, @TCA_RATE={0x8, 0x5, {0x6}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r4 = geteuid() r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1ec, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4000000000000000}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x15c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x1}}}}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004000}, 0xc001) quotactl(0x6, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000001c0)="1534a2558e6b69d09ffcf8032315e538fc65391c939498203c71f8fec5735670b24a4ccd04e6960ff826475ab467b307cee51519826e2a9ebad916248c71c0173ab5e4bf9866eebc97f8613af0a991b004dc284d183e3c72e9f6f2576ba60d8fb06290b1afe4173923ee289793eb5b8fb5d92bf79b39e42e54feadd9294f1cdadc80e4895a91048f76536b6afc2399c6478efad107ce3246007e91fe497015c1f63e4b544b59f984935a34b7bf9fb8a469ab6dc418a11f35c6f687c77a1299fa85d76eb6b6be66bb6b9b0e9328f2afd4f1d3d56444eccc58196738a9cb4f96a6f07da04843346a32bd66a2da82d55b0507d03d4c8d83d642c2") 13:58:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:23 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:23 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) [ 642.080586] protocol 88fb is buggy, dev hsr_slave_0 [ 642.085886] protocol 88fb is buggy, dev hsr_slave_1 [ 642.091308] protocol 88fb is buggy, dev hsr_slave_0 [ 642.096607] protocol 88fb is buggy, dev hsr_slave_1 13:58:23 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:23 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:23 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:23 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:23 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800211}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@deltfilter={0x224, 0x2d, 0x404, 0x70bd2b, 0x25dfdbff, {0x0, r1, {0xfff7, 0xfffe}, {0xffff, 0x7}, {0xe, 0x9}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1e8, 0x2, [@TCA_BPF_ACT={0x148, 0x1, @m_ife={0x144, 0xd, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_DMAC={0xc}, @TCA_IFE_TYPE={0x8, 0x5, 0x9}, @TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_DMAC={0xc, 0x3, @dev={[], 0x14}}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}]}, {0xfc, 0x6, "b4b1242a33962a1384dc1dd303cf833407eb869eb27e4bb213013fe4678b9856592381382802e7563600dd3aed75a4c22d89b282a5fdbc0d6b63f65242d10ffdd392f1226572ec397c4c968ef78dcf9697d5b4e33fc3904c0dedfd3f3321929dd0bb1b32302ace2602711d7ea003916ab0dadadedcfae3c9f7fbc415990eb016b4c0aa845806d16fe479fa23a454ae809f13b28eb67872fa4a2dc33d1060bf64138b1873f13e6d2764996778cdf89df2c791187bf01f7f9170043d9b245efe19fc3a3ee9e78baf5861799dbab6681773f16b040b50a65567d9ce00aa80369576db918d8c68bd0a41d9f65c7d514012aa57721a9e18cba0f3"}}}}, @TCA_BPF_ACT={0x58, 0x1, @m_skbedit={0x54, 0x11, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xbf, 0x1, 0x7, 0x2, 0x7}}]}, {0x1c, 0x6, "4fb65b73002c3f7b5650818aaec4ca8ec7d9647708e5e4f5"}}}}, @TCA_BPF_OPS={{0x8, 0x4, 0x7}, {0x3c, 0x5, [{0xc0000, 0xfff, 0x6, 0x5}, {0x7fff, 0x8, 0xffffffffffffff7e, 0x1}, {0x3, 0xfa, 0x7}, {0x2, 0x401, 0xa56, 0x6}, {0x4, 0x7, 0x0, 0x3}, {0xb1, 0x5, 0x4, 0x9}, {0x9, 0x2, 0x7f, 0x8001}]}}]}}, @TCA_RATE={0x8, 0x5, {0x6}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r4 = geteuid() r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1ec, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4000000000000000}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x15c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x1}}}}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004000}, 0xc001) quotactl(0x6, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000001c0)="1534a2558e6b69d09ffcf8032315e538fc65391c939498203c71f8fec5735670b24a4ccd04e6960ff826475ab467b307cee51519826e2a9ebad916248c71c0173ab5e4bf9866eebc97f8613af0a991b004dc284d183e3c72e9f6f2576ba60d8fb06290b1afe4173923ee289793eb5b8fb5d92bf79b39e42e54feadd9294f1cdadc80e4895a91048f76536b6afc2399c6478efad107ce3246007e91fe497015c1f63e4b544b59f984935a34b7bf9fb8a469ab6dc418a11f35c6f687c77a1299fa85d76eb6b6be66bb6b9b0e9328f2afd4f1d3d56444eccc58196738a9cb4f96a6f07da04843346a32bd66a2da82d55b0507d03d4c8d83d642c2") 13:58:23 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0xff, 0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x8000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) connect$can_bcm(r2, &(0x7f0000000280)={0x1d, r3}, 0x10) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:24 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x250001, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r0, 0x4) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) setsockopt(r0, 0x400, 0x6, &(0x7f0000000140)="5c9b0ff836a0611010fea1b1714ad7875d846bb7b8316a204759e987b99a1e84d1ea847b364a13d444325a163fc2cd62d4a2654d8651b4d55c55b57e9dbb2cd833d79969c8419d31f92c2fe80f38166ab14e2392362e165430345ef3dfeee1d49348e60d19e9ff9a0185f2143983cfa9f48c70e772916f3ded58778beaf60411eea48bc943bf27181a1ca8425f2376ee7f2cd51c71df253f17b51cfb1726a59c2a4256b48b34ab2103b202e3d60edab0f89d7cd8d9fcc516e6f62aff74e0ea72c27e168dcddbb09f83c984926ea6e2380a46e036563a767e5d70c2fbec6e893aeb6aebd8df4e6978b2e469", 0xeb) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000280)=0x56, 0x4) socketpair(0x10, 0x1, 0x6, &(0x7f0000000240)) 13:58:24 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:24 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:24 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800211}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@deltfilter={0x224, 0x2d, 0x404, 0x70bd2b, 0x25dfdbff, {0x0, r1, {0xfff7, 0xfffe}, {0xffff, 0x7}, {0xe, 0x9}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1e8, 0x2, [@TCA_BPF_ACT={0x148, 0x1, @m_ife={0x144, 0xd, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_DMAC={0xc}, @TCA_IFE_TYPE={0x8, 0x5, 0x9}, @TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_DMAC={0xc, 0x3, @dev={[], 0x14}}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}]}, {0xfc, 0x6, "b4b1242a33962a1384dc1dd303cf833407eb869eb27e4bb213013fe4678b9856592381382802e7563600dd3aed75a4c22d89b282a5fdbc0d6b63f65242d10ffdd392f1226572ec397c4c968ef78dcf9697d5b4e33fc3904c0dedfd3f3321929dd0bb1b32302ace2602711d7ea003916ab0dadadedcfae3c9f7fbc415990eb016b4c0aa845806d16fe479fa23a454ae809f13b28eb67872fa4a2dc33d1060bf64138b1873f13e6d2764996778cdf89df2c791187bf01f7f9170043d9b245efe19fc3a3ee9e78baf5861799dbab6681773f16b040b50a65567d9ce00aa80369576db918d8c68bd0a41d9f65c7d514012aa57721a9e18cba0f3"}}}}, @TCA_BPF_ACT={0x58, 0x1, @m_skbedit={0x54, 0x11, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xbf, 0x1, 0x7, 0x2, 0x7}}]}, {0x1c, 0x6, "4fb65b73002c3f7b5650818aaec4ca8ec7d9647708e5e4f5"}}}}, @TCA_BPF_OPS={{0x8, 0x4, 0x7}, {0x3c, 0x5, [{0xc0000, 0xfff, 0x6, 0x5}, {0x7fff, 0x8, 0xffffffffffffff7e, 0x1}, {0x3, 0xfa, 0x7}, {0x2, 0x401, 0xa56, 0x6}, {0x4, 0x7, 0x0, 0x3}, {0xb1, 0x5, 0x4, 0x9}, {0x9, 0x2, 0x7f, 0x8001}]}}]}}, @TCA_RATE={0x8, 0x5, {0x6}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r4 = geteuid() r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1ec, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4000000000000000}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x15c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x1}}}}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004000}, 0xc001) quotactl(0x6, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000001c0)="1534a2558e6b69d09ffcf8032315e538fc65391c939498203c71f8fec5735670b24a4ccd04e6960ff826475ab467b307cee51519826e2a9ebad916248c71c0173ab5e4bf9866eebc97f8613af0a991b004dc284d183e3c72e9f6f2576ba60d8fb06290b1afe4173923ee289793eb5b8fb5d92bf79b39e42e54feadd9294f1cdadc80e4895a91048f76536b6afc2399c6478efad107ce3246007e91fe497015c1f63e4b544b59f984935a34b7bf9fb8a469ab6dc418a11f35c6f687c77a1299fa85d76eb6b6be66bb6b9b0e9328f2afd4f1d3d56444eccc58196738a9cb4f96a6f07da04843346a32bd66a2da82d55b0507d03d4c8d83d642c2") 13:58:24 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:24 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800211}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@deltfilter={0x224, 0x2d, 0x404, 0x70bd2b, 0x25dfdbff, {0x0, r1, {0xfff7, 0xfffe}, {0xffff, 0x7}, {0xe, 0x9}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1e8, 0x2, [@TCA_BPF_ACT={0x148, 0x1, @m_ife={0x144, 0xd, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_DMAC={0xc}, @TCA_IFE_TYPE={0x8, 0x5, 0x9}, @TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_DMAC={0xc, 0x3, @dev={[], 0x14}}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}]}, {0xfc, 0x6, "b4b1242a33962a1384dc1dd303cf833407eb869eb27e4bb213013fe4678b9856592381382802e7563600dd3aed75a4c22d89b282a5fdbc0d6b63f65242d10ffdd392f1226572ec397c4c968ef78dcf9697d5b4e33fc3904c0dedfd3f3321929dd0bb1b32302ace2602711d7ea003916ab0dadadedcfae3c9f7fbc415990eb016b4c0aa845806d16fe479fa23a454ae809f13b28eb67872fa4a2dc33d1060bf64138b1873f13e6d2764996778cdf89df2c791187bf01f7f9170043d9b245efe19fc3a3ee9e78baf5861799dbab6681773f16b040b50a65567d9ce00aa80369576db918d8c68bd0a41d9f65c7d514012aa57721a9e18cba0f3"}}}}, @TCA_BPF_ACT={0x58, 0x1, @m_skbedit={0x54, 0x11, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xbf, 0x1, 0x7, 0x2, 0x7}}]}, {0x1c, 0x6, "4fb65b73002c3f7b5650818aaec4ca8ec7d9647708e5e4f5"}}}}, @TCA_BPF_OPS={{0x8, 0x4, 0x7}, {0x3c, 0x5, [{0xc0000, 0xfff, 0x6, 0x5}, {0x7fff, 0x8, 0xffffffffffffff7e, 0x1}, {0x3, 0xfa, 0x7}, {0x2, 0x401, 0xa56, 0x6}, {0x4, 0x7, 0x0, 0x3}, {0xb1, 0x5, 0x4, 0x9}, {0x9, 0x2, 0x7f, 0x8001}]}}]}}, @TCA_RATE={0x8, 0x5, {0x6}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r4 = geteuid() r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1ec, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4000000000000000}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x15c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x1}}}}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004000}, 0xc001) quotactl(0x6, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000001c0)="1534a2558e6b69d09ffcf8032315e538fc65391c939498203c71f8fec5735670b24a4ccd04e6960ff826475ab467b307cee51519826e2a9ebad916248c71c0173ab5e4bf9866eebc97f8613af0a991b004dc284d183e3c72e9f6f2576ba60d8fb06290b1afe4173923ee289793eb5b8fb5d92bf79b39e42e54feadd9294f1cdadc80e4895a91048f76536b6afc2399c6478efad107ce3246007e91fe497015c1f63e4b544b59f984935a34b7bf9fb8a469ab6dc418a11f35c6f687c77a1299fa85d76eb6b6be66bb6b9b0e9328f2afd4f1d3d56444eccc58196738a9cb4f96a6f07da04843346a32bd66a2da82d55b0507d03d4c8d83d642c2") 13:58:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:24 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:24 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 13:58:24 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ipx\x00') bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @mcast1, 0x4}, 0x1c) 13:58:24 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:25 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='.\x00', 0x2, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:25 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 13:58:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:25 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:25 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x101041, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, 0x0) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8ab, 0x2000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:25 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:25 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 13:58:25 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:25 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ipx\x00') bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @mcast1, 0x4}, 0x1c) 13:58:25 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r1 = dup(r0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000001c0)=""/153) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:25 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ipx\x00') bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @mcast1, 0x4}, 0x1c) 13:58:25 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(0xffffffffffffffff) 13:58:25 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:25 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:26 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(0xffffffffffffffff) 13:58:26 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ipx\x00') bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @mcast1, 0x4}, 0x1c) 13:58:26 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 13:58:26 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000002c0)=0xff, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfffffffffffffffd, 0x200000) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:26 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:26 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(0xffffffffffffffff) 13:58:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:26 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 13:58:26 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:26 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0xacb439ddea5b6fca) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 13:58:26 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 13:58:26 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:26 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:26 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x3, 0x8, 0x49ef48ee, 0x8d, "044b0b2be5f7f0e12a1b123f120003876872b5fc8ec3c39d9617a683f4ebd9f01cef33f108581b885f58b0eca36ebab40676d8fded923be395b0af77f252258eaa2b19ed2bd8da9d99065cde0e8800da0ed46a8e23f33f22df31ac6f1bb70c5afc3e6edd9f14bb5059997d71d4f654473bd934e6fc390d2f64651993489f42dc42d57dfbaedac8cf3b2dcbc899"}, 0x97, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:26 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:27 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) 13:58:27 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:27 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:27 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000001c0)={0x7, 0x5, 0x1, 0x8, 'syz0\x00', 0x20}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xff, 0x20402) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8880, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:27 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xad, 0x5, 0x40, "b0d31811644674abf6b3daa618c4f26d", "cbced0980ab13d70d648ba84821d4208a82d1c64273434651b2c8fcf2144e50b14cf742c3212363cbc3339a8c3d015d33f891d90eb57a895fcb40c4bbfc1ff7056a2070aaa76a0743b978066483e44dcfc6d444443040b74bd5a242ff7c4b514acdf2f7eff8e401244ba4f8a7fe363dc393b9a5977c156a2f4d9279f5f72a89daabd7b8bfc3c3e07c360b4456a4085c60d82f98d33f303e4"}, 0xad, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:27 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:27 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) 13:58:27 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:27 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) 13:58:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:27 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000200)='./file0\x00', 0x148) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') r1 = socket(0x8, 0x80000, 0x9) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)={0x7, 0x60670dd20834f572, 0x4, 0x4, {0x0, 0x2710}, {0x4, 0xc, 0x6, 0x8, 0x5, 0x3f, "22bf205e"}, 0x100000001, 0x1, @fd=r0, 0x4}) accept4$nfc_llcp(r1, &(0x7f0000000080), &(0x7f00000001c0)=0x60, 0xa3ef1e8f7f265c9d) 13:58:27 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:27 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xad, 0x5, 0x40, "b0d31811644674abf6b3daa618c4f26d", "cbced0980ab13d70d648ba84821d4208a82d1c64273434651b2c8fcf2144e50b14cf742c3212363cbc3339a8c3d015d33f891d90eb57a895fcb40c4bbfc1ff7056a2070aaa76a0743b978066483e44dcfc6d444443040b74bd5a242ff7c4b514acdf2f7eff8e401244ba4f8a7fe363dc393b9a5977c156a2f4d9279f5f72a89daabd7b8bfc3c3e07c360b4456a4085c60d82f98d33f303e4"}, 0xad, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:27 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:27 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:27 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xad, 0x5, 0x40, "b0d31811644674abf6b3daa618c4f26d", "cbced0980ab13d70d648ba84821d4208a82d1c64273434651b2c8fcf2144e50b14cf742c3212363cbc3339a8c3d015d33f891d90eb57a895fcb40c4bbfc1ff7056a2070aaa76a0743b978066483e44dcfc6d444443040b74bd5a242ff7c4b514acdf2f7eff8e401244ba4f8a7fe363dc393b9a5977c156a2f4d9279f5f72a89daabd7b8bfc3c3e07c360b4456a4085c60d82f98d33f303e4"}, 0xad, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:27 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1]}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:27 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:27 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000100)) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:28 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xad, 0x5, 0x40, "b0d31811644674abf6b3daa618c4f26d", "cbced0980ab13d70d648ba84821d4208a82d1c64273434651b2c8fcf2144e50b14cf742c3212363cbc3339a8c3d015d33f891d90eb57a895fcb40c4bbfc1ff7056a2070aaa76a0743b978066483e44dcfc6d444443040b74bd5a242ff7c4b514acdf2f7eff8e401244ba4f8a7fe363dc393b9a5977c156a2f4d9279f5f72a89daabd7b8bfc3c3e07c360b4456a4085c60d82f98d33f303e4"}, 0xad, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:28 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:28 executing program 1: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:28 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2ce) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000001c0)=0x6) close(r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0xb708f010c3225df, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) io_setup(0xfff, &(0x7f0000000080)=0x0) io_getevents(r3, 0xec41, 0x1, &(0x7f00000000c0)=[{}], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1, &(0x7f0000000340)}, 0x40}, {{&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/135, 0x87}, {&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/124, 0x7c}, {&(0x7f0000000680)=""/190, 0xbe}], 0x6, &(0x7f00000007c0)=""/230, 0xe6}, 0x10001}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f00000009c0)=""/167, 0xa7}, {&(0x7f0000000a80)=""/35, 0x23}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000001b00)=""/231, 0xe7}, 0x1}, {{&(0x7f0000001c00)=@isdn, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1, &(0x7f0000002cc0)=""/10, 0xa}, 0x7}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/87, 0x57}, {&(0x7f0000002dc0)=""/210, 0xd2}, {&(0x7f0000002ec0)=""/178, 0xb2}], 0x4, &(0x7f0000002fc0)=""/252, 0xfc}, 0x3}, {{&(0x7f00000030c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003140)=""/248, 0xf8}, {&(0x7f0000003240)=""/45, 0x2d}, {&(0x7f0000003280)=""/180, 0xb4}, {&(0x7f0000003340)=""/32, 0x20}], 0x4}, 0x8}, {{&(0x7f00000033c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003440)=""/115, 0x73}, {&(0x7f00000034c0)=""/194, 0xc2}, {&(0x7f00000035c0)=""/147, 0x93}], 0x3, &(0x7f00000036c0)=""/154, 0x9a}, 0xffff}, {{&(0x7f0000003780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003800)=""/1, 0x1}, {&(0x7f0000003840)=""/36, 0x24}, {&(0x7f0000003880)=""/180, 0xb4}, {&(0x7f0000003940)=""/30, 0x1e}, {&(0x7f0000003980)=""/167, 0xa7}], 0x5, &(0x7f0000003ac0)=""/77, 0x4d}, 0x1f}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000003b40)=""/166, 0xa6}, {&(0x7f0000003c00)=""/168, 0xa8}, {&(0x7f0000003cc0)=""/165, 0xa5}, {&(0x7f0000003d80)=""/19, 0x13}, {&(0x7f0000003dc0)=""/84, 0x54}, {&(0x7f0000003e40)=""/35, 0x23}, {&(0x7f0000003e80)=""/229, 0xe5}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/183, 0xb7}, {&(0x7f0000005040)=""/206, 0xce}], 0xa, &(0x7f0000005200)=""/181, 0xb5}, 0x3}], 0x9, 0x57d7df71c01cea58, &(0x7f0000005500)) r4 = syz_open_dev$amidi(&(0x7f0000005580)='/dev/amidi#\x00', 0x9, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000005540)=0xb5) 13:58:28 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:28 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:28 executing program 1: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:28 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:28 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) prctl$PR_GET_SECCOMP(0x15) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:28 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:28 executing program 1: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:28 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:28 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xf4, 0x2, 0x0, "5a2fe04620b8f12da6049eb94dbf0bd7", "bad113ccd0f770a771ab3d738e695e1b2511c8d6fe90960fa67b969a650d930ca1a0142d9291ce1fd0061d05c80e9f0eb4f41fe86cbace6b6b892467a31e0947b36c182ef8914e77826af91780024c867eb487903cf180d590ee45c0e7bf46d8a8b1ad1e6002dbe98555e8c7001dcb0aca7990d8c6d631cdabb51c510acbf25db7d5cacb8d7d0ccea39c78427b62e65c456469dd374ccf541f28c0cfe0efcc74ae1f8f5c937685ac3e664de5fbef4bb3af1fec4d5f79942f1d98f8dd212b06a961e1a64e104a17964401331f4980a9fd6ef660cbc4de844a60ab4a64179aa2"}, 0xf4, 0x3) 13:58:28 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:28 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x57da437ab979acd0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x84) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x800000000000) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:28 executing program 5: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:28 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:29 executing program 5: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) [ 647.601071] net_ratelimit: 20 callbacks suppressed [ 647.601150] protocol 88fb is buggy, dev hsr_slave_0 [ 647.613120] protocol 88fb is buggy, dev hsr_slave_1 13:58:29 executing program 4: ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4) 13:58:29 executing program 5: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:29 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:29 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) [ 648.080607] protocol 88fb is buggy, dev hsr_slave_0 [ 648.085891] protocol 88fb is buggy, dev hsr_slave_1 [ 648.160330] protocol 88fb is buggy, dev hsr_slave_0 [ 648.165493] protocol 88fb is buggy, dev hsr_slave_1 13:58:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x8000, 0x6, 0x3, 0x0, 0xd, 0x3, 0x4, 0x87, 0x6, 0x2, 0x20, 0x400}) mmap(&(0x7f0000f99000/0x3000)=nil, 0x3000, 0x200000e, 0x10, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81000010}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x901b}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'ip_vti0\x00', @remote}) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000400)={0x5, @capture={0x1000, 0xe2241b5a1bfb0dc5, {0x80, 0x6}, 0x64b}}) 13:58:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:29 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:29 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000001c0)=""/131) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = getpid() sched_getaffinity(r2, 0x8, &(0x7f0000000280)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)=0x393) 13:58:29 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:29 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) [ 648.320121] protocol 88fb is buggy, dev hsr_slave_0 [ 648.325268] protocol 88fb is buggy, dev hsr_slave_1 [ 648.330423] protocol 88fb is buggy, dev hsr_slave_0 [ 648.335480] protocol 88fb is buggy, dev hsr_slave_1 13:58:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2850, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:29 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:29 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:29 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)={0x30002}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 13:58:30 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000001c0)=""/131) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = getpid() sched_getaffinity(r2, 0x8, &(0x7f0000000280)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)=0x393) 13:58:30 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 13:58:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 13:58:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000700)=0xfffffffffffffe65) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000b00)='./file0\x00', 0x8000200000000000) r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x400000011, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x40, &(0x7f0000000000)) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000300)={0x3, 0xf55, {0x57, 0xfffffffffffffff8, 0x9, {0x3, 0x800}, {0x0, 0x9}, @cond=[{0x80000000, 0x101, 0x35, 0x0, 0x9f51, 0xdfcaed0000000000}, {0x0, 0x6, 0x23b, 0x0, 0xdb63, 0xe9c1}]}, {0x57, 0xae8e, 0x7, {0x9}, {0xffffffff, 0x100}, @period={0x5c, 0x2, 0x2, 0x8000, 0x5, {0x3, 0x5, 0x81, 0x100}, 0x0, 0x0}}}) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffff7, 0x7c2f876d3ae81264) stat(0x0, &(0x7f0000000600)) getresuid(&(0x7f00000004c0), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0xa7}, 0x4) ioctl$sock_ifreq(r4, 0x8934, &(0x7f0000000a00)={'nr0\x00', @ifru_mtu=0xbe4a}) 13:58:30 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) r1 = getpgid(0xffffffffffffffff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, r1, 0x1, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000c4a000/0x4000)=nil, 0x4000, 0x1000014, 0x80010, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "2a4869ff953cac0c6b4fd2d385dde340"}, 0x11, 0x1) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 13:58:30 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-monitor\x00', 0x0, 0x0) getpeername$llc(r0, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000005c0)=0x10) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x10) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='ppp0keyring\tcgroup!wlan1selinux\x00', &(0x7f0000000200)='\'+em1self)vboxnet1(\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/dev/vhci\x00', &(0x7f00000002c0)='/dev/vhci\x00', &(0x7f0000000300)='/dev/vhci\x00', &(0x7f0000000340)='/#ppp1trusted*user:mime_type\x00'], &(0x7f0000000500)=[&(0x7f00000003c0)='/dev/vhci\x00', &(0x7f0000000400)=')\x00', &(0x7f0000000440)=')system\x00', &(0x7f0000000480)='selinux^nodev\x00', &(0x7f00000004c0)='/dev/vhci\x00'], 0x1000) 13:58:30 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000001c0)=""/131) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) r2 = getpid() sched_getaffinity(r2, 0x8, &(0x7f0000000280)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)=0x393) 13:58:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) [ 649.295673] ------------[ cut here ]------------ [ 649.300713] WARNING: CPU: 0 PID: 26376 at fs/kernfs/dir.c:494 kernfs_get+0x58/0x70 [ 649.308437] Kernel panic - not syncing: panic_on_warn set ... [ 649.308437] [ 649.315810] CPU: 0 PID: 26376 Comm: syz-executor.4 Not tainted 4.14.139 #35 [ 649.322914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.332274] Call Trace: [ 649.334868] dump_stack+0x138/0x19c [ 649.338517] panic+0x1f2/0x426 [ 649.341897] ? add_taint.cold+0x16/0x16 [ 649.345892] ? kernfs_get+0x58/0x70 [ 649.349513] ? __warn.cold+0x14/0x36 [ 649.353230] ? kernfs_get+0x58/0x70 [ 649.356849] __warn.cold+0x2f/0x36 [ 649.360385] ? ist_end_non_atomic+0x10/0x10 [ 649.364898] ? kernfs_get+0x58/0x70 [ 649.368523] report_bug+0x216/0x254 [ 649.372159] do_error_trap+0x1bb/0x310 [ 649.376049] ? math_error+0x360/0x360 [ 649.379854] ? __schedule+0x7c0/0x1cd0 [ 649.383756] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 649.388592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 649.393432] do_invalid_op+0x1b/0x20 [ 649.397136] invalid_op+0x1b/0x40 [ 649.400577] RIP: 0010:kernfs_get+0x58/0x70 [ 649.404912] RSP: 0018:ffff8880593c7978 EFLAGS: 00010216 [ 649.410270] RAX: 0000000000040000 RBX: ffff888080f35000 RCX: ffffc90012a95000 [ 649.417533] RDX: 000000000000378c RSI: ffffffff81a9d3a8 RDI: ffff888080f35000 [ 649.424975] RBP: ffff8880593c7980 R08: ffff888056eac080 R09: 0000000000000001 [ 649.432326] R10: 0000000000000000 R11: ffff888056eac080 R12: ffff88809e0ed8c0 [ 649.439704] R13: ffff8880a9103000 R14: 0000000000000001 R15: 00000000000041ed [ 649.447000] ? kernfs_get+0x58/0x70 [ 649.450628] ? kernfs_get+0x58/0x70 [ 649.454254] kernfs_new_node+0x95/0xf0 [ 649.458127] kernfs_create_dir_ns+0x41/0x140 [ 649.462525] sysfs_create_dir_ns+0xbe/0x1d0 [ 649.467006] kobject_add_internal.part.0.cold+0x114/0x5ae [ 649.472645] kobject_add+0x11f/0x180 [ 649.476361] ? kset_create_and_add+0x180/0x180 [ 649.480935] ? mutex_unlock+0xd/0x10 [ 649.484638] device_add+0x383/0x1490 [ 649.488338] ? device_initialize+0x430/0x430 [ 649.492740] ? device_private_init+0x190/0x190 [ 649.497330] hci_register_dev+0x2d9/0x810 [ 649.501460] ? hci_init_sysfs+0x7c/0xa0 [ 649.505511] __vhci_create_device+0x2a6/0x560 [ 649.509991] vhci_write+0x2a1/0x437 [ 649.513614] __vfs_write+0x4a7/0x6b0 [ 649.517513] ? kernel_read+0x120/0x120 [ 649.521388] ? rw_verify_area+0xea/0x2b0 [ 649.525534] vfs_write+0x198/0x500 [ 649.529147] SyS_write+0xfd/0x230 [ 649.532596] ? SyS_read+0x230/0x230 [ 649.536321] ? do_syscall_64+0x53/0x640 [ 649.540280] ? SyS_read+0x230/0x230 [ 649.543997] do_syscall_64+0x1e8/0x640 [ 649.547870] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 649.552808] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 649.558075] RIP: 0033:0x459829 [ 649.561251] RSP: 002b:00007f54bc851c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.568946] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 649.576295] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000005 [ 649.583651] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 649.591001] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54bc8526d4 [ 649.598264] R13: 00000000004c9bc3 R14: 00000000004e1310 R15: 00000000ffffffff [ 649.607764] Kernel Offset: disabled [ 649.611655] Rebooting in 86400 seconds..