{0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x80003f, &(0x7f0000000200)=0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000000000000800000000000000564a000000000000ff7f000000000000440000000000000008010855000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000007685000000000000000707000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000003508000000000000060000001000000001003c000000000000000000000000000000000000000000000000000000000000000070000000000000001f0000000000000006000000000000000001000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff0500000000430000000800000000000000090800ff000000000000000000000000000000000000000000000000000000000000000000000000fefffffff7ffffff24dd00000000000007000000000000009e06000800000000000000000000000000000000000000000000000000000000000000000000000008162cf3a5efc6eff5b3ba61e4000000000000000600000000000000cd62000000000000004501000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000c033000000000000070000000000000007060900000000000000000000000000000000000000000000000000000000000000000000000000795b0d409d1e817fd8ac3ef2482c111982d98999a40e75740df01c6ccc57694a41799a5ffffee0272e159eb890899bf559929efa1f0379c9ac837bb258eb63da4428d3143e6fe24a24dacf202582a6967b1333469a95e232ece381692c6a318dad05648253446659212fe51db5007e1e83886542180f379f0e29c89be585e141e0898ac2540ab643a6afbbdac6f39d1b765674d7ec04013a024c1a77f0cab41a23dfb38f63f4344011df9f324e70da0c0c97b198d2581b51b93cc4bb64abc392fbe8773027a249a96c8c7bc50a2a5632a9c38d3a36e75ed99d5147ed94c6de100a2bc5acecc17b81f6dd401763dcd72f2023790d655076f3d2b4050fc67dbcea3f386345e3817ac61c1ea636ca0768e14e5c99a6fa2d3f4eb4d1977427"]) io_submit(r0, 0x1, &(0x7f0000000640)=[0x0]) syz_open_dev$dspn(0x0, 0x0, 0x0) add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700), 0x0, 0xfffffffffffffffa) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 13:41:11 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:11 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(0xffffffffffffffff, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000540)="cd366a77460e84b6027c670157cb0d8944faa9450915bbd15a8f85745ec8ff846cd718c58c7e02a3a084aa5efd7c6258f3596e7750099c6f34166dc3a372124d7c43ce95b2f9687cb2ad4c39ec7fa1300f3a630e1a3193e65f2bfe7894e8cc2b35af5b0a61108c8dcf13f5cec315bb31812d4c4551b1cc3621c435d6479d", 0x7e, 0x6, 0x0, 0x3}]) syz_open_dev$dspn(0x0, 0x0, 0x0) add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700), 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 13:41:12 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(0xffffffffffffffff, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:12 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(0xffffffffffffffff, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:13 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:13 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:14 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000540)="cd366a77460e84b6027c670157cb0d8944faa9450915bbd15a8f85745ec8ff846cd718c58c7e02a3a084aa5efd7c6258f3596e7750099c6f34166dc3a372124d7c43ce95b2f9687cb2ad4c39ec7fa1300f3a630e1a3193e65f2bfe7894e8cc2b35af5b0a61108c8dcf13f5cec315bb31812d4c4551b1cc3621c435d6479d", 0x7e, 0x6, 0x0, 0x3}]) syz_open_dev$dspn(0x0, 0x0, 0x0) add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700), 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 13:41:14 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:14 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:14 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:14 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:14 executing program 0: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000540)="cd366a77460e84b6027c670157cb0d8944faa9450915bbd15a8f85745ec8ff846cd718c58c7e02a3a084aa5efd7c6258f3596e7750099c6f34166dc3a372124d7c43ce95b2f9687cb2ad4c39ec7fa1300f3a630e1a3193e65f2bfe7894e8cc2b35af5b0a61108c8dcf13f5cec315bb31812d4c4551b1cc3621c435d6479d", 0x7e, 0x6, 0x0, 0x3}]) syz_open_dev$dspn(0x0, 0x0, 0x0) add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700), 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 13:41:15 executing program 0: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:15 executing program 0: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:16 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:16 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:17 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:17 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:17 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:17 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:17 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:41:17 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:17 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:41:17 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:17 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:41:17 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 13:41:19 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:19 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:20 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getpgrp(0x0) ioprio_set$pid(0x0, 0x0, 0x0) rt_sigaction(0x130, &(0x7f0000000140)={&(0x7f0000000380)="f08104d309000000c4e2fd32f5d8213ed277c6c4c151e067adc4c3010f9b37000000d3c4e3791daf95690000a30f0f830d000000a0f36318c4c3e9789d44000000f0", {0x7}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x113) r2 = dup2(0xffffffffffffffff, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) faccessat(r2, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000b40)) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)) sendmmsg$unix(r0, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) timer_create(0x0, 0x0, &(0x7f0000000a00)) clock_gettime(0x0, &(0x7f0000000a40)) 13:41:20 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 13:41:20 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:20 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:20 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:20 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:20 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:20 executing program 1: open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 13:41:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000004180)=""/134, 0x86}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/1, 0x1}], 0x7, &(0x7f0000000580)=""/220, 0xdc}, 0x3}, {{&(0x7f0000006280)=@isdn, 0x80, &(0x7f0000000940)=[{&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000840)=""/239, 0xef}], 0x2, &(0x7f0000000980)=""/233, 0xe9}, 0x5}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 13:41:21 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:21 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:23 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:23 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) connect$can_bcm(r1, &(0x7f0000000240), 0x10) 13:41:23 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:23 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:23 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/dmmidi#\x00'}, {0x20, '/dev/dmmidi#\x00'}, {}, {0x20, '))keyringself'}], 0xa, "6f6d2021f4693ab6a341af40ebbd"}, 0x44) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8") socket$inet(0x2, 0x6000000000000003, 0x6) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r3, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r5 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r6, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14) r7 = socket(0x10, 0x20000000080003, 0xc) write(r7, &(0x7f0000000000)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 13:41:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) connect$can_bcm(r1, &(0x7f0000000240), 0x10) 13:41:23 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:23 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) connect$can_bcm(r1, &(0x7f0000000240), 0x10) 13:41:23 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) connect$can_bcm(r1, &(0x7f0000000240), 0x10) 13:41:26 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:26 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:26 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:26 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) 13:41:26 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/dmmidi#\x00'}, {0x20, '/dev/dmmidi#\x00'}, {}, {0x20, '))keyringself'}], 0xa, "6f6d2021f4693ab6a341af40ebbd"}, 0x44) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8") socket$inet(0x2, 0x6000000000000003, 0x6) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r3, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r5 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r6, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14) r7 = socket(0x10, 0x20000000080003, 0xc) write(r7, &(0x7f0000000000)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 13:41:26 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000000000000000"], 0x4f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:26 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) 13:41:27 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/dmmidi#\x00'}, {0x20, '/dev/dmmidi#\x00'}, {}, {0x20, '))keyringself'}], 0xa, "6f6d2021f4693ab6a341af40ebbd"}, 0x44) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8") socket$inet(0x2, 0x6000000000000003, 0x6) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r3, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r5 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r6, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14) r7 = socket(0x10, 0x20000000080003, 0xc) write(r7, &(0x7f0000000000)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 13:41:27 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) 13:41:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:27 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 1: r0 = dup(0xffffffffffffffff) connect$can_bcm(r0, &(0x7f0000000240), 0x10) 13:41:27 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/dmmidi#\x00'}, {0x20, '/dev/dmmidi#\x00'}, {}, {0x20, '))keyringself'}], 0xa, "6f6d2021f4693ab6a341af40ebbd"}, 0x44) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="5d92efdf6644c3f88f4acc0f9af8") socket$inet(0x2, 0x6000000000000003, 0x6) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x200000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r3, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r5 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x5, 0x7}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r6, 0x1ff, 0x8, 0x401, 0x1ff, 0x7fffffff}, &(0x7f00000003c0)=0x14) r7 = socket(0x10, 0x20000000080003, 0xc) write(r7, &(0x7f0000000000)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 13:41:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:27 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 1: r0 = dup(0xffffffffffffffff) connect$can_bcm(r0, &(0x7f0000000240), 0x10) 13:41:27 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x4000000001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x0, 0x9}}) 13:41:30 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:30 executing program 1: r0 = dup(0xffffffffffffffff) connect$can_bcm(r0, &(0x7f0000000240), 0x10) 13:41:30 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) setrlimit(0x7, &(0x7f0000000000)) 13:41:30 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:30 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:30 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) r1 = dup(r0) connect$can_bcm(r1, &(0x7f0000000240), 0x10) 13:41:30 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:30 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) r1 = dup(r0) connect$can_bcm(r1, &(0x7f0000000240), 0x10) 13:41:30 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:30 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) setrlimit(0x7, &(0x7f0000000000)) 13:41:30 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) r1 = dup(r0) connect$can_bcm(r1, &(0x7f0000000240), 0x10) 13:41:30 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:33 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:33 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = dup(0xffffffffffffffff) connect$can_bcm(r0, &(0x7f0000000240), 0x10) 13:41:33 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:33 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:33 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) setrlimit(0x7, &(0x7f0000000000)) 13:41:33 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = dup(0xffffffffffffffff) connect$can_bcm(r0, &(0x7f0000000240), 0x10) 13:41:33 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) setrlimit(0x7, &(0x7f0000000000)) 13:41:33 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:33 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:33 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = dup(0xffffffffffffffff) connect$can_bcm(r0, &(0x7f0000000240), 0x10) 13:41:33 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup(r0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) 13:41:33 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup(r0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) 13:41:36 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:36 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup(r0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) 13:41:36 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) connect$can_bcm(r1, 0x0, 0x0) 13:41:36 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:36 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 13:41:36 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:36 executing program 2: socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) connect$can_bcm(r1, 0x0, 0x0) 13:41:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = dup(r0) connect$can_bcm(r1, 0x0, 0x0) 13:41:36 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:36 executing program 3: socketpair(0x0, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x40000106], [0xc2]}) 13:41:37 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:37 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:39 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:39 executing program 3: socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:39 executing program 1: ioperm(0x0, 0x4, 0x5) 13:41:39 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:39 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x1000000000000080) dup(r0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x108) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40020a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x3, [0x1f, 0x1, 0x0]}) 13:41:39 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:40 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c2655070017"], 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:40 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:40 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0xc0000082], [0xc2]}) 13:41:42 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0xc0000082], [0xc2]}) 13:41:42 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c2655070017"], 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:42 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:42 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='statm\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000241, 0x0) 13:41:42 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) setreuid(0x0, 0x0) 13:41:43 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c2655070017"], 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1158.559782][ T26] audit: type=1326 audit(1975758103.030:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29631 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 13:41:43 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:43 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:43 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb"], 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:43 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb"], 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:43 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1159.302556][ T26] audit: type=1326 audit(1975758103.780:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29631 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 1159.762789][T21274] device bridge_slave_1 left promiscuous mode [ 1159.769057][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.832400][T21274] device bridge_slave_0 left promiscuous mode [ 1159.838646][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.964378][T21274] device hsr_slave_1 left promiscuous mode [ 1160.005863][T21274] device hsr_slave_0 left promiscuous mode [ 1160.065122][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1160.077387][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1160.089971][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1160.136963][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1160.237181][T21274] bond0 (unregistering): Released all slaves 13:41:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:45 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:45 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb"], 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:45 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x4, 0x0, "dd8fcd35cbca4f2d1777bbbc9323da9d634135c376793ea81ad2b3162337bae07101c0ba91dd369ed7ce6a29b97100c41ebccf0a4f00f0506650d47faf7f4b9d35bd4b70c85a291ee250fd15549f5187"}, 0xd8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendto$inet6(r1, &(0x7f0000000280)="1212fd1a2cb0edd9396767d0671c715ce9f729e89756acb3478954bb1066abed2e986766f1534b4ffba65fd1c418ebb4548cd6cfb1287c47b6893d875705efdfb05513706be908ba7fcff547e1d02b320947b7fd86eff934fe301f76e3068b52970b74f910bd3942097617b83c7b8e85294ffa7b2812ffe1071459d9dd1431836c828e24b99ee1e298669c5d5aa0e01bc59de4a7c47e5ad898cb95c9e02f1eda75b3b9b6ad35a9fb", 0xa8, 0x4004000, 0x0, 0x0) 13:41:45 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:45 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:46 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1161.668095][T29682] IPVS: ftp: loaded support on port[0] = 21 13:41:46 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:46 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000040)=""/152, 0x98}], 0x2, 0x0) 13:41:46 executing program 5: socketpair(0x8000000000001e, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:46 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1161.868911][T29682] chnl_net:caif_netlink_parms(): no params data found 13:41:46 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x20, &(0x7f00000000c0)=[@cr4={0x1, 0x100304}], 0x1) [ 1162.086453][T29682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.097959][T29682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.115980][T29682] device bridge_slave_0 entered promiscuous mode [ 1162.127827][T29682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.139194][T29682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.149665][T29682] device bridge_slave_1 entered promiscuous mode [ 1162.188560][T29682] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1162.206376][T29682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1162.225363][T29682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1162.233656][T29682] team0: Port device team_slave_0 added [ 1162.239695][T29682] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1162.247658][T29682] team0: Port device team_slave_1 added [ 1162.253910][T29682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1162.261986][T29682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1162.313683][T29682] device hsr_slave_0 entered promiscuous mode [ 1162.351900][T29682] device hsr_slave_1 entered promiscuous mode [ 1162.391952][T29682] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1162.399545][T29682] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1162.414663][T29682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.422229][T29682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.429498][T29682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.436692][T29682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.473467][T29682] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1162.480251][T29682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.489733][T29682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1162.500281][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1162.508308][T27131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.516018][T27131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.524548][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1162.537064][T29682] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1162.544189][T29682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.554926][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1162.563697][T28144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.570725][T28144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.582630][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1162.590887][T27131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.597968][T27131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.612995][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1162.621426][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1162.638221][T29682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1162.649148][T29682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1162.660209][T29682] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1162.667881][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1162.676579][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1162.685504][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1162.699501][T29682] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1162.708895][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1162.721228][T29682] 8021q: adding VLAN 0 to HW filter on device batadv0 13:41:48 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:48 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:48 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:48 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:48 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:49 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:49 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:49 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:49 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:49 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:49 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:49 executing program 1: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:51 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:51 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:51 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:51 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:51 executing program 1: syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:52 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:52 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:52 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:41:52 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb300000000000000000000000"], 0x4b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:52 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:52 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, 0x0, &(0x7f0000000100)) 13:41:52 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f00000000c0), 0x0) 13:41:54 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x4000000001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000000008000f4ffffff"]}) 13:41:54 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:54 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:54 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:55 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:55 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:55 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:55 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:55 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:55 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:55 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:57 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:57 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:57 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:57 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:57 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:58 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:58 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:41:58 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:58 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:41:59 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:41:59 executing program 1: socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:00 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:00 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:00 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:00 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:00 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:01 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:01 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:01 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb300000000000000000"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:01 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:01 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:02 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:02 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:03 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:03 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:03 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:03 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:04 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1179.793039][ T7] device bridge_slave_1 left promiscuous mode [ 1179.799286][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.842668][ T7] device bridge_slave_0 left promiscuous mode [ 1179.848884][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 13:42:04 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) [ 1180.039126][ T7] device hsr_slave_1 left promiscuous mode [ 1180.085335][ T7] device hsr_slave_0 left promiscuous mode 13:42:04 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:04 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:04 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1180.149710][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1180.179447][ T7] team0 (unregistering): Port device team_slave_0 removed 13:42:04 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1180.223233][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1180.301598][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1180.387871][ T7] bond0 (unregistering): Released all slaves 13:42:05 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:05 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:06 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:06 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:06 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:14 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:14 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:14 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:14 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:14 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:14 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) [ 1189.881061][T30085] IPVS: ftp: loaded support on port[0] = 21 [ 1189.957252][T30085] chnl_net:caif_netlink_parms(): no params data found [ 1189.991415][T30085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.998593][T30085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.006583][T30085] device bridge_slave_0 entered promiscuous mode [ 1190.014204][T30085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.021257][T30085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.029064][T30085] device bridge_slave_1 entered promiscuous mode [ 1190.046706][T30085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1190.056462][T30085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1190.073231][T30085] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1190.081055][T30085] team0: Port device team_slave_0 added [ 1190.087287][T30085] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1190.095259][T30085] team0: Port device team_slave_1 added [ 1190.102210][T30085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1190.110184][T30085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1190.193506][T30085] device hsr_slave_0 entered promiscuous mode [ 1190.241994][T30085] device hsr_slave_1 entered promiscuous mode [ 1190.285724][T30085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1190.293388][T30085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1190.311481][T30085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.318573][T30085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.325932][T30085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.333033][T30085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.367689][T30085] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1190.374833][T30085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.384576][T30085] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1190.394435][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1190.403078][T21070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.410593][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.419222][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1190.430459][T30085] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1190.441063][T30085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.451190][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.459915][T27131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.467014][T27131] bridge0: port 1(bridge_slave_0) entered forwarding state 13:42:15 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1190.492829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.501037][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.508110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.516331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1190.525445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.533970][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 13:42:15 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) [ 1190.553440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1190.565486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1190.574744][T30085] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1190.581456][T30085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1190.630352][T30085] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1190.660735][T30085] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:15 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:15 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:16 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:16 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:16 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:16 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:17 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:17 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:17 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:17 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:17 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:18 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:18 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:18 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:19 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:19 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:20 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:20 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:20 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:20 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:20 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:20 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:20 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:21 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:21 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:21 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:21 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:21 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:23 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:23 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0x0, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:23 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:23 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:23 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:23 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:23 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:24 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:24 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:24 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:25 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:25 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:25 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240), 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:25 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:25 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:25 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:25 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:25 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:26 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:26 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:26 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:26 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:26 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:26 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:26 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:26 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a", 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:27 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:27 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58", 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:27 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:27 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356e", 0xe) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:27 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:27 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:27 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:27 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2", 0xf) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:28 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:28 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x10}}, 0x0) 13:42:28 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:28 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:28 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:28 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1204.642209][T10156] device bridge_slave_1 left promiscuous mode [ 1204.648369][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.702413][T10156] device bridge_slave_0 left promiscuous mode [ 1204.708568][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.847404][T10156] device hsr_slave_1 left promiscuous mode [ 1204.894990][T10156] device hsr_slave_0 left promiscuous mode [ 1204.935138][T10156] team0 (unregistering): Port device team_slave_1 removed [ 1204.949680][T10156] team0 (unregistering): Port device team_slave_0 removed [ 1204.961133][T10156] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1205.015771][T10156] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1205.089330][T10156] bond0 (unregistering): Released all slaves 13:42:35 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:35 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:35 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, 0x0, 0x0) 13:42:35 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:35 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, 0x0, 0x0) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 13:42:36 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:36 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540), 0x0) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:36 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:36 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080), 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1211.888510][T30612] IPVS: ftp: loaded support on port[0] = 21 [ 1212.011193][T30612] chnl_net:caif_netlink_parms(): no params data found [ 1212.055723][T30612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.063698][T30612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.071280][T30612] device bridge_slave_0 entered promiscuous mode [ 1212.078798][T30612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.085991][T30612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.094137][T30612] device bridge_slave_1 entered promiscuous mode [ 1212.110319][T30612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1212.120489][T30612] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1212.139422][T30612] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1212.147557][T30612] team0: Port device team_slave_0 added [ 1212.153708][T30612] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1212.161506][T30612] team0: Port device team_slave_1 added [ 1212.167461][T30612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1212.175542][T30612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1212.234696][T30612] device hsr_slave_0 entered promiscuous mode [ 1212.272058][T30612] device hsr_slave_1 entered promiscuous mode [ 1212.332358][T30612] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1212.339954][T30612] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1212.354510][T30612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.361601][T30612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.368908][T30612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.376010][T30612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.407815][T30612] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1212.415003][T30612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.424240][T30612] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1212.434226][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1212.444056][T27131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.451634][T27131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.459584][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1212.470774][T30612] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1212.478040][T30612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.487029][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1212.495784][T21070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.502874][T21070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.524179][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1212.532690][T27131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.539711][T27131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.547723][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1212.556139][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1212.564649][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1212.575778][T30612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1212.586953][T30612] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1212.594143][T30612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1212.603600][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1212.611252][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1212.626026][T30612] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1212.637228][T30612] 8021q: adding VLAN 0 to HW filter on device batadv0 13:42:38 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:38 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:38 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, 0x0, 0x0) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:38 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 13:42:38 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080), 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:38 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540), 0x0) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:38 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 13:42:38 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, 0x0, 0x0) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:38 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080), 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:38 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:39 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540), 0x0) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = semget$private(0x0, 0x3, 0x40) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000000)=""/251) umount2(&(0x7f0000000100)='./file0\x00', 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_getparam(r2, &(0x7f0000000180)) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64MMAP\x00', &(0x7f0000000240)='^\x00', 0x2, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x5bdcbbcf, 0x6}]}, 0xc, 0x3) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000300)={0x2}, &(0x7f0000000340), &(0x7f0000000400)={r3, r4+10000000}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r5, &(0x7f0000000440)=""/206, 0xce) r6 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000540)={0x7a000000000000}, 0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000005c0)) r8 = openat(r7, &(0x7f0000000600)='./file0\x00', 0x20401, 0x100) getresuid(&(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000780)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000880)=0xe8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000980)={{0x80000000, r10, r11, r13, r14, 0x8, 0x79a80}, 0x2, 0x3, 0x0, 0x2, r2, r2, 0x80000000}) r15 = creat(&(0x7f0000000a00)='./file0\x00', 0x20) write$nbd(r15, &(0x7f0000000a40)={0x67446698, 0x0, 0x1, 0x2, 0x3, "cb350fddc9fcdd0e64712ee60c080e44a3ddb07fc93f695f6fd4951a7fb0daa5657230"}, 0x33) uselib(&(0x7f0000000a80)='./file0\x00') setxattr$security_capability(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='security.capability\x00', &(0x7f0000000b40)=@v3={0x3000000, [{0x7}, {0x2, 0x6}], r9}, 0x18, 0x2) sendmsg$netlink(r15, &(0x7f0000008dc0)={&(0x7f0000000b80)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc, &(0x7f0000008c80)=[{&(0x7f0000000bc0)={0x48, 0x23, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@generic="a54ece7cfdb736105eb1dba19403bfea9772d26b8e39097fe1aa1cc38d273a0672594ec6d4b5703b2dda95a7b6e5a4cdcc41faa271ec"]}, 0x48}, {&(0x7f0000001040)={0x10, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x10}, {&(0x7f00000019c0)={0x10, 0x1f, 0x300, 0x70bd26, 0x25dfdbfb}, 0x10}, {&(0x7f0000008b00)={0x10, 0x22, 0x100, 0x70bd29, 0x25dfdbfc}, 0x10}], 0x4}, 0x40) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000008e00)={0x8, 0x401, 0x3, 0x6, 0x7cb, 0x4}) r16 = syz_genetlink_get_family_id$team(&(0x7f0000008e80)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000009340)={&(0x7f0000008e40)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000009300)={&(0x7f0000008ec0)={0x5c, r16, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 13:42:39 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:39 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:39 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:39 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:40 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, 0x0) 13:42:40 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1040, 0x0) execve(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, 0x0) [ 1215.769204][T30676] cgroup: fork rejected by pids controller in /syz1 13:42:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0x8c0d351c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r3, 0x0, 0x0, 0x20003ffc, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, 0x0) 13:42:42 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:42 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0) ioctl$sock_proto_private(r2, 0x0, 0x0) 13:42:42 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:42 executing program 4: perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x100000000, 0x0) munmap(&(0x7f0000d4c000/0x2000)=nil, 0x2000) socket$inet_icmp_raw(0x2, 0x3, 0x1) fdatasync(r0) 13:42:42 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:42 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000), 0x1c) 13:42:42 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) socket$bt_bnep(0x1f, 0x3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x0, 0x0, 0x17a], [0xc2]}) 13:42:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) socket$bt_bnep(0x1f, 0x3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) socket$bt_bnep(0x1f, 0x3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:45 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) socket$bt_bnep(0x1f, 0x3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:45 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 13:42:45 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1b9380f1, 0x63e) r1 = syz_open_dev$audion(0x0, 0x0, 0x600) accept4$tipc(r1, &(0x7f00000001c0)=@id, 0x0, 0x80800) 13:42:46 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:46 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:48 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:48 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:48 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:48 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:49 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:49 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:49 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:49 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:49 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 13:42:49 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 13:42:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:42:52 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:52 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x7fffffff) 13:42:52 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:52 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:52 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:42:52 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 13:42:52 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:42:53 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080), 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:53 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 13:42:53 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, &(0x7f0000000080), 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:55 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 13:42:55 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:55 executing program 3: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x0, 0x0, 0x0, 0x280000) readv(r1, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:42:55 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:55 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 13:42:55 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:55 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:42:55 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:55 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:56 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:42:56 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:56 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:56 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:56 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) [ 1232.374143][T21274] device bridge_slave_1 left promiscuous mode [ 1232.380407][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.442591][T21274] device bridge_slave_0 left promiscuous mode [ 1232.448979][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.595357][T21274] device hsr_slave_1 left promiscuous mode [ 1232.637264][T21274] device hsr_slave_0 left promiscuous mode [ 1232.697549][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1232.709249][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1232.720792][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1232.777777][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1232.857390][T21274] bond0 (unregistering): Released all slaves 13:42:58 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:58 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:42:58 executing program 3: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:58 executing program 1: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:42:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1234.611211][T31019] IPVS: ftp: loaded support on port[0] = 21 13:42:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:42:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:42:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1234.910151][T31019] chnl_net:caif_netlink_parms(): no params data found 13:42:59 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1235.063976][T31019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.084514][T31019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.105535][T31019] device bridge_slave_0 entered promiscuous mode [ 1235.123257][T31019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.141605][T31019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.157380][T31019] device bridge_slave_1 entered promiscuous mode [ 1235.197699][T31019] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1235.208808][T31019] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1235.230361][T31019] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1235.239679][T31019] team0: Port device team_slave_0 added 13:42:59 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 13:42:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1235.249850][T31019] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1235.258082][T31019] team0: Port device team_slave_1 added [ 1235.264041][T31019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1235.272178][T31019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1235.337279][T31019] device hsr_slave_0 entered promiscuous mode [ 1235.372968][T31019] device hsr_slave_1 entered promiscuous mode [ 1235.412078][T31019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1235.433189][T31019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1235.450548][T31019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.457647][T31019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.465027][T31019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.472112][T31019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.510545][T31019] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1235.517544][T31019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.531154][T31019] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1235.540376][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1235.548775][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.556569][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.565208][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1235.585986][T31019] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1235.593091][T31019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.605676][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1235.614765][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.621858][ T7577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.632237][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1235.640454][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.647500][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.679512][T31019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1235.690412][T31019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.701456][T31019] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1235.710194][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1235.718818][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1235.727433][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1235.736100][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1235.744352][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1235.744723][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1235.767709][T31019] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1235.779756][T31019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.932433][T21803] device bridge_slave_1 left promiscuous mode [ 1235.938695][T21803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.992221][T21803] device bridge_slave_0 left promiscuous mode [ 1235.998331][T21803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.123744][T21803] device hsr_slave_1 left promiscuous mode [ 1236.164750][T21803] device hsr_slave_0 left promiscuous mode [ 1236.217376][T21803] team0 (unregistering): Port device team_slave_1 removed [ 1236.228993][T21803] team0 (unregistering): Port device team_slave_0 removed [ 1236.240678][T21803] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1236.266206][T21803] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1236.362216][T21803] bond0 (unregistering): Released all slaves 13:43:01 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:43:01 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:01 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:02 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:07 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:07 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:07 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:07 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:07 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb3000000000000000"], 0x47) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:07 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1243.199611][T31117] IPVS: ftp: loaded support on port[0] = 21 13:43:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1243.390939][T31117] chnl_net:caif_netlink_parms(): no params data found 13:43:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1243.476222][T31117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.490095][T31117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.499456][T31117] device bridge_slave_0 entered promiscuous mode [ 1243.514630][T31117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.536910][T31117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.548949][T31117] device bridge_slave_1 entered promiscuous mode 13:43:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1243.585138][T31117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1243.598781][T31117] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:43:08 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) [ 1243.711421][T31117] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1243.781983][T31117] team0: Port device team_slave_0 added [ 1243.814482][T31117] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1243.875228][T31117] team0: Port device team_slave_1 added [ 1243.935896][T31117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1244.071449][T31117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1244.176971][T31117] device hsr_slave_0 entered promiscuous mode [ 1244.204644][T31117] device hsr_slave_1 entered promiscuous mode [ 1244.262071][T31117] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1244.269743][T31117] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1244.295457][T31117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.302538][T31117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.309797][T31117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.316876][T31117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.349027][T31117] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1244.356193][T31117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.365217][T31117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1244.376537][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1244.384431][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.392488][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.400714][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1244.411408][T31117] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1244.418525][T31117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.427596][T31117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1244.435359][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1244.444190][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1244.452867][T21070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.459914][T21070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.469209][T31117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1244.477303][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1244.485833][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1244.494584][T21070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.501683][T21070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.511266][T31117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1244.518922][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1244.530743][T31117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1244.539340][T21070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1244.549344][T31117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1244.557572][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1244.566344][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1244.575128][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1244.585718][T31117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1244.593419][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1244.602149][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1244.612806][T31117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1244.622689][T31117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1244.630109][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1244.638576][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1244.646874][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1244.656561][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1244.666130][T31117] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1244.673183][T31117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1244.686704][T31117] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1244.699197][T31117] 8021q: adding VLAN 0 to HW filter on device batadv0 13:43:09 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:09 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:09 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb"], 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:09 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:09 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:09 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:10 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:10 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000"], 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:10 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:10 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:10 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:10 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:11 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:11 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:11 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:11 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:19 executing program 5: clone(0x13102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:43:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:19 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000180)={0x5, 0x40, 0x122, 0x100}) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:19 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:19 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:19 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(&(0x7f0000000340)) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:19 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:20 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r1) mknod(0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x47, 0x0, 0x0, {0x5, 0x400, 0x31435750, 0x0, 0x0, 0x8000, 0x0, 0x10}}) 13:43:20 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="e0f7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:43:20 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1256.043894][T31294] IPVS: ftp: loaded support on port[0] = 21 [ 1256.509635][T31294] chnl_net:caif_netlink_parms(): no params data found [ 1256.543023][T31294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.550153][T31294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.558189][T31294] device bridge_slave_0 entered promiscuous mode [ 1256.566365][T31294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.573565][T31294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.581154][T31294] device bridge_slave_1 entered promiscuous mode [ 1256.726019][T31294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1256.735766][T31294] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1256.892669][T31294] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1256.900457][T31294] team0: Port device team_slave_0 added [ 1256.906999][T31294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1256.915013][T31294] team0: Port device team_slave_1 added [ 1256.920875][T31294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1256.928962][T31294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1257.124504][T31294] device hsr_slave_0 entered promiscuous mode [ 1257.171872][T31294] device hsr_slave_1 entered promiscuous mode [ 1257.340918][T31294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1257.348553][T31294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1257.364967][T31294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.372023][T31294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.379310][T31294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.386402][T31294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.582264][T21070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.590854][T21070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.625188][T21274] device bridge_slave_1 left promiscuous mode [ 1257.631346][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.672179][T21274] device bridge_slave_0 left promiscuous mode [ 1257.678317][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.293401][T21274] device hsr_slave_1 left promiscuous mode [ 1261.347171][T21274] device hsr_slave_0 left promiscuous mode [ 1261.395052][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1261.409369][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1261.420674][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1261.485648][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1261.574731][T21274] bond0 (unregistering): Released all slaves [ 1261.701855][T31294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.711472][T31294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1261.720238][T31294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1261.727295][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1261.735659][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1261.747400][T31294] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1261.754210][T31294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.762978][T31294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1261.770645][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1261.779562][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1261.787920][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.794960][ T7577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.805209][T31294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1261.813774][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.822691][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.830881][T27131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.837943][T27131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.848143][T31294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1261.856596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1261.866795][T31294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1261.877263][T31294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1261.885640][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1261.894720][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1261.903414][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1261.913927][T31294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1261.922477][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1261.924156][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1261.939898][T27131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1261.952736][T31294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1261.960211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1261.968933][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1261.979200][T31294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1261.986951][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1261.995543][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1262.005625][T31294] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1262.013686][T31294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1262.064427][T31294] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1262.077091][T31294] 8021q: adding VLAN 0 to HW filter on device batadv0 13:43:26 executing program 5: clone(0x13102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:43:26 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:26 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='memory.max\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='e', 0x1}], 0x1) 13:43:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:43:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1262.305606][T31320] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 13:43:26 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1262.410885][T31320] CPU: 0 PID: 31320 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1262.420054][T31320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.430100][T31320] Call Trace: [ 1262.433389][T31320] dump_stack+0x1db/0x2d0 [ 1262.437727][T31320] ? dump_stack_print_info.cold+0x20/0x20 [ 1262.443454][T31320] dump_header+0x1e6/0x11a6 [ 1262.447962][T31320] ? add_lock_to_list.isra.0+0x450/0x450 [ 1262.453600][T31320] ? print_usage_bug+0xd0/0xd0 [ 1262.458370][T31320] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1262.464020][T31320] ? ___ratelimit+0x37c/0x686 [ 1262.468701][T31320] ? mark_held_locks+0xb1/0x100 [ 1262.473552][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1262.479356][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1262.485159][T31320] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1262.490440][T31320] ? trace_hardirqs_on+0xbd/0x310 [ 1262.495483][T31320] ? kasan_check_read+0x11/0x20 [ 1262.500339][T31320] ? ___ratelimit+0x37c/0x686 [ 1262.505016][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1262.510819][T31320] ? do_raw_spin_trylock+0x270/0x270 [ 1262.516097][T31320] ? trace_hardirqs_on_caller+0x310/0x310 [ 1262.521812][T31320] ? lock_acquire+0x1db/0x570 [ 1262.526503][T31320] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1262.532302][T31320] ? ___ratelimit+0xac/0x686 [ 1262.536894][T31320] ? idr_get_free+0xee0/0xee0 [ 1262.541568][T31320] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1262.546865][T31320] oom_kill_process.cold+0x10/0x9ca [ 1262.552069][T31320] ? cgroup_procs_next+0x70/0x70 [ 1262.557010][T31320] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1262.559308][T31340] IPVS: ftp: loaded support on port[0] = 21 [ 1262.562204][T31320] ? oom_badness+0xa50/0xa50 [ 1262.562235][T31320] ? oom_evaluate_task+0x540/0x540 [ 1262.562260][T31320] ? mem_cgroup_iter_break+0x30/0x30 [ 1262.562293][T31320] ? mutex_trylock+0x2d0/0x2d0 [ 1262.562322][T31320] ? cgroup_file_notify+0x217/0x2e0 [ 1262.562344][T31320] out_of_memory+0x885/0x1420 [ 1262.583121][T31320] ? mark_held_locks+0xb1/0x100 [ 1262.583139][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1262.583155][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1262.583172][T31320] ? oom_killer_disable+0x340/0x340 [ 1262.583189][T31320] ? kasan_check_read+0x11/0x20 [ 1262.583199][T31320] ? cgroup_file_notify+0x217/0x2e0 [ 1262.583212][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1262.583222][T31320] ? do_raw_spin_trylock+0x270/0x270 [ 1262.583251][T31320] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1262.583265][T31320] ? memory_oom_group_write+0x160/0x160 [ 1262.583289][T31320] memory_max_write+0x1b0/0x3e0 [ 1262.593382][T31320] ? lock_acquire+0x1db/0x570 [ 1262.593405][T31320] ? mem_cgroup_write+0x440/0x440 [ 1262.593418][T31320] ? lock_release+0xc40/0xc40 [ 1262.593436][T31320] ? add_lock_to_list.isra.0+0x450/0x450 [ 1262.593450][T31320] ? lock_downgrade+0xbe0/0xbe0 [ 1262.593467][T31320] cgroup_file_write+0x252/0x830 [ 1262.593484][T31320] ? mem_cgroup_write+0x440/0x440 [ 1262.608742][T31320] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1262.608787][T31320] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1262.608805][T31320] kernfs_fop_write+0x2ba/0x480 [ 1262.608825][T31320] do_iter_write+0x4a5/0x610 [ 1262.608859][T31320] vfs_writev+0x1ee/0x370 [ 1262.630339][T31320] ? vfs_iter_write+0xb0/0xb0 [ 1262.630360][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1262.630390][T31320] ? mutex_lock_nested+0x16/0x20 [ 1262.630402][T31320] ? mutex_lock_nested+0x16/0x20 [ 1262.630421][T31320] ? __fdget_pos+0xdc/0x1f0 [ 1262.652511][T31320] ? __fdget_raw+0x20/0x20 [ 1262.652531][T31320] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1262.652547][T31320] ? put_timespec64+0x115/0x1b0 13:43:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1262.652569][T31320] do_writev+0x11a/0x300 [ 1262.652588][T31320] ? vfs_writev+0x370/0x370 [ 1262.652607][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1262.652627][T31320] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1262.662109][T31320] __x64_sys_writev+0x75/0xb0 [ 1262.662129][T31320] do_syscall_64+0x1a3/0x800 [ 1262.662149][T31320] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1262.662167][T31320] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1262.662188][T31320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1262.662212][T31320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1262.662226][T31320] RIP: 0033:0x457ec9 [ 1262.671886][T31320] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1262.671895][T31320] RSP: 002b:00007fb0f5584c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1262.671909][T31320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 1262.671918][T31320] RDX: 0000000000000001 RSI: 0000000020000700 RDI: 0000000000000004 [ 1262.671927][T31320] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1262.671936][T31320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0f55856d4 [ 1262.671945][T31320] R13: 00000000004c488e R14: 00000000004dca78 R15: 00000000ffffffff [ 1262.711706][T31320] memory: usage 35376kB, limit 0kB, failcnt 0 [ 1262.744976][T31320] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1262.890363][T31320] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1262.919888][T31320] Memory cgroup stats for /syz4: cache:64KB rss:24068KB rss_huge:22528KB shmem:60KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:24156KB inactive_file:24KB active_file:8KB unevictable:0KB [ 1262.979994][T31320] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30231,uid=0 13:43:27 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:27 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}, 0x119) socket$inet(0x2, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00@'], 0x1) [ 1263.073167][T31320] Memory cgroup out of memory: Kill process 30231 (syz-executor4) score 9015000 or sacrifice child [ 1263.161342][T31320] Killed process 30231 (syz-executor4) total-vm:70532kB, anon-rss:2192kB, file-rss:33744kB, shmem-rss:0kB [ 1263.224185][T27131] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1263.261085][ T1042] oom_reaper: reaped process 30231 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB [ 1263.287936][ T7577] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 1263.332604][T31320] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 13:43:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:27 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x5ff7ffffd) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$midi(0x0, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000b00)={0x18, 0xffffffffffffffda, 0x1, {0x5}}, 0x18) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) getresgid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000a40)={{}, {0x1, 0x3}, [{0x2, 0x1, r1}, {0x2, 0x2, r3}, {0x2, 0x3, r4}, {0x2, 0x1, r5}], {0x4, 0x3}, [{}], {}, {0x20, 0x3}}, 0x4c, 0x3) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000100)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x0, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) [ 1263.418881][T31340] chnl_net:caif_netlink_parms(): no params data found [ 1263.546419][T31340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.562793][T31340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.580869][T31340] device bridge_slave_0 entered promiscuous mode [ 1263.612410][T31340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.633930][T31340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.689508][T31340] device bridge_slave_1 entered promiscuous mode [ 1263.747774][T31340] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1263.760105][T31340] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1263.786219][T31340] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1263.794988][T31340] team0: Port device team_slave_0 added [ 1263.801404][T31340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1263.810267][T31340] team0: Port device team_slave_1 added [ 1263.816730][T31340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1263.825211][T31340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1263.842154][T31320] CPU: 1 PID: 31320 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1263.851188][T31320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.861232][T31320] Call Trace: [ 1263.864517][T31320] dump_stack+0x1db/0x2d0 [ 1263.868856][T31320] ? dump_stack_print_info.cold+0x20/0x20 [ 1263.874583][T31320] dump_header+0x1e6/0x11a6 [ 1263.879084][T31320] ? add_lock_to_list.isra.0+0x450/0x450 [ 1263.884718][T31320] ? print_usage_bug+0xd0/0xd0 [ 1263.889482][T31320] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1263.895107][T31320] ? ___ratelimit+0x37c/0x686 [ 1263.899793][T31320] ? mark_held_locks+0xb1/0x100 [ 1263.904647][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1263.910454][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1263.916257][T31320] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1263.921543][T31320] ? trace_hardirqs_on+0xbd/0x310 [ 1263.926565][T31320] ? kasan_check_read+0x11/0x20 [ 1263.931411][T31320] ? ___ratelimit+0x37c/0x686 [ 1263.936090][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1263.941906][T31320] ? do_raw_spin_trylock+0x270/0x270 [ 1263.947191][T31320] ? trace_hardirqs_on_caller+0x310/0x310 [ 1263.952913][T31320] ? lock_acquire+0x1db/0x570 [ 1263.957598][T31320] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1263.963398][T31320] ? ___ratelimit+0xac/0x686 [ 1263.967990][T31320] ? idr_get_free+0xee0/0xee0 [ 1263.972667][T31320] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1263.977960][T31320] oom_kill_process.cold+0x10/0x9ca [ 1263.983169][T31320] ? cgroup_procs_next+0x70/0x70 [ 1263.988124][T31320] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1263.993323][T31320] ? oom_badness+0xa50/0xa50 [ 1263.997921][T31320] ? oom_evaluate_task+0x540/0x540 [ 1264.003027][T31320] ? mem_cgroup_iter_break+0x30/0x30 [ 1264.008302][T31320] ? mutex_trylock+0x2d0/0x2d0 [ 1264.013076][T31320] ? cgroup_file_notify+0x217/0x2e0 [ 1264.018275][T31320] out_of_memory+0x885/0x1420 [ 1264.022943][T31320] ? mark_held_locks+0xb1/0x100 [ 1264.027796][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1264.033599][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1264.039408][T31320] ? oom_killer_disable+0x340/0x340 [ 1264.044616][T31320] ? kasan_check_read+0x11/0x20 [ 1264.049458][T31320] ? cgroup_file_notify+0x217/0x2e0 [ 1264.054653][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1264.060450][T31320] ? do_raw_spin_trylock+0x270/0x270 [ 1264.065748][T31320] ? ___preempt_schedule+0x16/0x18 [ 1264.070867][T31320] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1264.076413][T31320] ? memory_oom_group_write+0x160/0x160 [ 1264.081977][T31320] memory_max_write+0x1b0/0x3e0 [ 1264.086820][T31320] ? lock_acquire+0x1db/0x570 [ 1264.091500][T31320] ? mem_cgroup_write+0x440/0x440 [ 1264.096518][T31320] ? lock_release+0xc40/0xc40 [ 1264.101196][T31320] ? add_lock_to_list.isra.0+0x450/0x450 [ 1264.106828][T31320] ? lock_downgrade+0xbe0/0xbe0 [ 1264.111675][T31320] cgroup_file_write+0x252/0x830 [ 1264.116610][T31320] ? mem_cgroup_write+0x440/0x440 [ 1264.121627][T31320] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1264.127286][T31320] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1264.132916][T31320] kernfs_fop_write+0x2ba/0x480 [ 1264.137771][T31320] do_iter_write+0x4a5/0x610 [ 1264.142370][T31320] vfs_writev+0x1ee/0x370 [ 1264.146707][T31320] ? vfs_iter_write+0xb0/0xb0 [ 1264.151388][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1264.157199][T31320] ? mutex_lock_nested+0x16/0x20 [ 1264.162137][T31320] ? mutex_lock_nested+0x16/0x20 [ 1264.167075][T31320] ? __fdget_pos+0xdc/0x1f0 [ 1264.171573][T31320] ? __fdget_raw+0x20/0x20 [ 1264.175984][T31320] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1264.182217][T31320] ? put_timespec64+0x115/0x1b0 [ 1264.187071][T31320] do_writev+0x11a/0x300 [ 1264.191313][T31320] ? vfs_writev+0x370/0x370 [ 1264.195833][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1264.201634][T31320] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1264.207093][T31320] __x64_sys_writev+0x75/0xb0 [ 1264.211780][T31320] do_syscall_64+0x1a3/0x800 [ 1264.216367][T31320] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1264.221992][T31320] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1264.227713][T31320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1264.233264][T31320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1264.239150][T31320] RIP: 0033:0x457ec9 [ 1264.243042][T31320] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1264.262635][T31320] RSP: 002b:00007fb0f5584c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1264.271040][T31320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 1264.279026][T31320] RDX: 0000000000000001 RSI: 0000000020000700 RDI: 0000000000000004 [ 1264.286985][T31320] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1264.286995][T31320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0f55856d4 [ 1264.287003][T31320] R13: 00000000004c488e R14: 00000000004dca78 R15: 00000000ffffffff [ 1264.329618][T31320] memory: usage 32956kB, limit 0kB, failcnt 9 [ 1264.353563][T31320] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1264.362966][T31320] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1264.369890][T31320] Memory cgroup stats for /syz4: cache:64KB rss:21968KB rss_huge:20480KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21996KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1264.392364][T31320] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30638,uid=0 [ 1264.408017][T31320] Memory cgroup out of memory: Kill process 30638 (syz-executor4) score 9015000 or sacrifice child [ 1264.426467][T31320] Killed process 30638 (syz-executor4) total-vm:70532kB, anon-rss:2192kB, file-rss:33744kB, shmem-rss:0kB [ 1264.450501][T31340] device hsr_slave_0 entered promiscuous mode [ 1264.458651][T31319] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1264.469604][T31319] CPU: 1 PID: 31319 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1264.478605][T31319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.488633][T31319] Call Trace: [ 1264.491901][T31319] dump_stack+0x1db/0x2d0 [ 1264.496213][T31319] ? dump_stack_print_info.cold+0x20/0x20 [ 1264.501914][T31319] dump_header+0x1e6/0x11a6 [ 1264.506397][T31319] ? add_lock_to_list.isra.0+0x450/0x450 [ 1264.512004][T31319] ? print_usage_bug+0xd0/0xd0 [ 1264.516743][T31319] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1264.522352][T31319] ? ___ratelimit+0x37c/0x686 [ 1264.527186][T31319] ? mark_held_locks+0xb1/0x100 [ 1264.532027][T31319] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1264.537812][T31319] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1264.543593][T31319] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1264.548859][T31319] ? trace_hardirqs_on+0xbd/0x310 [ 1264.553862][T31319] ? kasan_check_read+0x11/0x20 [ 1264.558686][T31319] ? ___ratelimit+0x37c/0x686 [ 1264.563341][T31319] ? trace_hardirqs_off_caller+0x300/0x300 [ 1264.569125][T31319] ? do_raw_spin_trylock+0x270/0x270 [ 1264.574384][T31319] ? trace_hardirqs_on_caller+0x310/0x310 [ 1264.580078][T31319] ? lock_acquire+0x1db/0x570 [ 1264.584741][T31319] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1264.590561][T31319] ? ___ratelimit+0xac/0x686 [ 1264.595130][T31319] ? idr_get_free+0xee0/0xee0 [ 1264.599786][T31319] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1264.605054][T31319] oom_kill_process.cold+0x10/0x9ca [ 1264.610231][T31319] ? cgroup_procs_next+0x70/0x70 [ 1264.615147][T31319] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1264.620320][T31319] ? oom_badness+0xa50/0xa50 [ 1264.624887][T31319] ? oom_evaluate_task+0x540/0x540 [ 1264.629976][T31319] ? mem_cgroup_iter_break+0x30/0x30 [ 1264.635234][T31319] ? mutex_trylock+0x2d0/0x2d0 [ 1264.640084][T31319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.646316][T31319] ? rcu_read_unlock_special+0x380/0x380 [ 1264.651927][T31319] out_of_memory+0x885/0x1420 [ 1264.656578][T31319] ? mem_cgroup_iter+0x4f4/0xf50 [ 1264.661504][T31319] ? oom_killer_disable+0x340/0x340 [ 1264.666688][T31319] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1264.672473][T31319] ? lock_acquire+0x1db/0x570 [ 1264.677133][T31319] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1264.682653][T31319] ? do_raw_spin_unlock+0xa0/0x330 [ 1264.687742][T31319] ? memory_oom_group_write+0x160/0x160 [ 1264.693267][T31319] ? do_raw_spin_trylock+0x270/0x270 [ 1264.698539][T31319] ? _raw_spin_unlock+0x2d/0x50 [ 1264.703367][T31319] try_charge+0x1407/0x1d30 [ 1264.707852][T31319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.714070][T31319] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1264.719596][T31319] ? rcu_read_unlock_special+0x380/0x380 [ 1264.725239][T31319] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1264.730760][T31319] ? get_mem_cgroup_from_page+0x190/0x190 [ 1264.736470][T31319] ? rcu_read_lock_sched_held+0x110/0x130 [ 1264.742166][T31319] mem_cgroup_try_charge+0x43a/0xdb0 [ 1264.747427][T31319] ? mem_cgroup_protected+0xa10/0xa10 [ 1264.752781][T31319] ? __anon_vma_prepare+0x36d/0x760 [ 1264.757965][T31319] ? anon_vma_fork+0x880/0x880 [ 1264.762715][T31319] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1264.768936][T31319] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1264.775164][T31319] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1264.780774][T31319] __handle_mm_fault+0x25ed/0x5610 [ 1264.785866][T31319] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1264.791389][T31319] ? check_preemption_disabled+0x48/0x290 [ 1264.797092][T31319] ? handle_mm_fault+0x3cc/0xc80 [ 1264.802014][T31319] ? lock_downgrade+0xbe0/0xbe0 [ 1264.806845][T31319] ? kasan_check_read+0x11/0x20 [ 1264.811677][T31319] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1264.817638][T31319] ? rcu_read_unlock_special+0x380/0x380 [ 1264.823244][T31319] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1264.829463][T31319] ? check_preemption_disabled+0x48/0x290 [ 1264.835159][T31319] handle_mm_fault+0x4ec/0xc80 [ 1264.839897][T31319] ? __handle_mm_fault+0x5610/0x5610 [ 1264.845154][T31319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.851364][T31319] ? vmacache_update+0x114/0x140 [ 1264.856285][T31319] __do_page_fault+0x5ef/0xda0 [ 1264.861020][T31319] ? do_futex+0x2910/0x2910 [ 1264.865516][T31319] do_page_fault+0xe6/0x7d8 [ 1264.870005][T31319] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1264.875621][T31319] ? vmalloc_sync_all+0x30/0x30 [ 1264.880448][T31319] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1264.886585][T31319] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1264.892198][T31319] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1264.897911][T31319] ? page_fault+0x8/0x30 [ 1264.902146][T31319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1264.907665][T31319] ? page_fault+0x8/0x30 [ 1264.911883][T31319] page_fault+0x1e/0x30 [ 1264.916011][T31319] RIP: 0033:0x40f8ef [ 1264.919886][T31319] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1264.939479][T31319] RSP: 002b:00007ffde3dbb410 EFLAGS: 00010206 [ 1264.945519][T31319] RAX: 00007fb0f5544000 RBX: 0000000000020000 RCX: 0000000000457f1a [ 1264.953464][T31319] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1264.961411][T31319] RBP: 00007ffde3dbb4f0 R08: ffffffffffffffff R09: 0000000000000000 [ 1264.969353][T31319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde3dbb5d0 [ 1264.977302][T31319] R13: 00007fb0f5564700 R14: 000000000073bfac R15: 000000000073bfac [ 1264.986772][T31319] memory: usage 30624kB, limit 0kB, failcnt 9 [ 1264.993296][T31340] device hsr_slave_1 entered promiscuous mode [ 1264.999497][T31319] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1265.007025][T31319] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1265.014016][T31319] Memory cgroup stats for /syz4: cache:64KB rss:19892KB rss_huge:18432KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19836KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1265.035533][T31319] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30689,uid=0 [ 1265.051601][T31340] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1265.059195][T31340] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1265.066567][T31319] Memory cgroup out of memory: Kill process 30689 (syz-executor4) score 9015000 or sacrifice child [ 1265.078958][T31319] Killed process 30689 (syz-executor4) total-vm:70532kB, anon-rss:2192kB, file-rss:33744kB, shmem-rss:0kB [ 1265.098887][ T1042] oom_reaper: reaped process 30689 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB [ 1265.110672][T31340] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1265.127181][T31320] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1265.144940][T31320] CPU: 1 PID: 31320 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1265.153967][T31320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.164018][T31320] Call Trace: [ 1265.167417][T31320] dump_stack+0x1db/0x2d0 [ 1265.171748][T31320] ? dump_stack_print_info.cold+0x20/0x20 [ 1265.177498][T31320] dump_header+0x1e6/0x11a6 [ 1265.182006][T31320] ? add_lock_to_list.isra.0+0x450/0x450 [ 1265.187657][T31320] ? print_usage_bug+0xd0/0xd0 [ 1265.192426][T31320] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1265.198069][T31320] ? ___ratelimit+0x37c/0x686 [ 1265.201752][T31340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.202747][T31320] ? mark_held_locks+0xb1/0x100 [ 1265.202767][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1265.219950][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1265.224836][T31340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1265.225762][T31320] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1265.237198][T31340] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1265.237763][T31320] ? trace_hardirqs_on+0xbd/0x310 [ 1265.237777][T31320] ? kasan_check_read+0x11/0x20 [ 1265.237795][T31320] ? ___ratelimit+0x37c/0x686 [ 1265.252382][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1265.254393][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1265.254406][T31320] ? do_raw_spin_trylock+0x270/0x270 [ 1265.254424][T31320] ? trace_hardirqs_on_caller+0x310/0x310 [ 1265.259643][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1265.266252][T31320] ? lock_acquire+0x1db/0x570 [ 1265.266275][T31320] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1265.266290][T31320] ? ___ratelimit+0xac/0x686 [ 1265.266305][T31320] ? idr_get_free+0xee0/0xee0 [ 1265.266322][T31320] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1265.285152][T31340] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1265.290262][T31320] oom_kill_process.cold+0x10/0x9ca [ 1265.302852][T31340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.305266][T31320] ? cgroup_procs_next+0x70/0x70 [ 1265.305288][T31320] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1265.317073][T31340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1265.321945][T31320] ? oom_badness+0xa50/0xa50 [ 1265.321966][T31320] ? oom_evaluate_task+0x540/0x540 [ 1265.321982][T31320] ? mem_cgroup_iter_break+0x30/0x30 [ 1265.321999][T31320] ? mutex_trylock+0x2d0/0x2d0 [ 1265.330703][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1265.333747][T31320] ? cgroup_file_notify+0x217/0x2e0 [ 1265.333771][T31320] out_of_memory+0x885/0x1420 [ 1265.333788][T31320] ? mark_held_locks+0xb1/0x100 [ 1265.339321][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1265.343871][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1265.343887][T31320] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1265.343905][T31320] ? oom_killer_disable+0x340/0x340 [ 1265.343924][T31320] ? kasan_check_read+0x11/0x20 [ 1265.353608][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.356078][T31320] ? cgroup_file_notify+0x217/0x2e0 [ 1265.356093][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1265.356110][T31320] ? do_raw_spin_trylock+0x270/0x270 [ 1265.361202][ T7577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.366448][T31320] ? ___preempt_schedule+0x16/0x18 [ 1265.366474][T31320] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1265.366493][T31320] ? memory_oom_group_write+0x160/0x160 [ 1265.374135][T31340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1265.379286][T31320] memory_max_write+0x1b0/0x3e0 [ 1265.385012][T27132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1265.389104][T31320] ? lock_acquire+0x1db/0x570 [ 1265.389122][T31320] ? mem_cgroup_write+0x440/0x440 [ 1265.389136][T31320] ? lock_release+0xc40/0xc40 [ 1265.395199][T27132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1265.402028][T31320] ? add_lock_to_list.isra.0+0x450/0x450 [ 1265.402050][T31320] ? lock_downgrade+0xbe0/0xbe0 [ 1265.402070][T31320] cgroup_file_write+0x252/0x830 [ 1265.402089][T31320] ? mem_cgroup_write+0x440/0x440 [ 1265.408595][T27132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1265.413649][T31320] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1265.413676][T31320] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1265.413710][T31320] kernfs_fop_write+0x2ba/0x480 [ 1265.413732][T31320] do_iter_write+0x4a5/0x610 [ 1265.419501][T27132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.423732][T31320] vfs_writev+0x1ee/0x370 [ 1265.423751][T31320] ? vfs_iter_write+0xb0/0xb0 [ 1265.423767][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1265.423796][T31320] ? mutex_lock_nested+0x16/0x20 [ 1265.430787][T27132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.435947][T31320] ? mutex_lock_nested+0x16/0x20 [ 1265.435962][T31320] ? __fdget_pos+0xdc/0x1f0 13:43:30 executing program 5: clone(0x13102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:43:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000140)={0x7e}) 13:43:30 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1265.435979][T31320] ? __fdget_raw+0x20/0x20 [ 1265.444606][T31340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1265.447020][T31320] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1265.454747][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1265.459281][T31320] ? put_timespec64+0x115/0x1b0 [ 1265.459302][T31320] do_writev+0x11a/0x300 [ 1265.459322][T31320] ? vfs_writev+0x370/0x370 [ 1265.468524][T31340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1265.470360][T31320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1265.470383][T31320] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1265.478621][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1265.482834][T31320] __x64_sys_writev+0x75/0xb0 [ 1265.482854][T31320] do_syscall_64+0x1a3/0x800 [ 1265.482871][T31320] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1265.482890][T31320] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1265.494430][T31340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1265.494894][T31320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1265.500079][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1265.504553][T31320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1265.504566][T31320] RIP: 0033:0x457ec9 [ 1265.504582][T31320] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1265.504595][T31320] RSP: 002b:00007fb0f5584c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1265.514115][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1265.518255][T31320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 1265.518264][T31320] RDX: 0000000000000001 RSI: 0000000020000700 RDI: 0000000000000004 [ 1265.518273][T31320] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1265.518286][T31320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0f55856d4 [ 1265.526069][T31340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1265.528034][T31320] R13: 00000000004c488e R14: 00000000004dca78 R15: 00000000ffffffff [ 1265.533707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1265.563839][T31320] memory: usage 28300kB, limit 0kB, failcnt 46 [ 1265.623887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1265.678096][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1265.696469][T31320] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1265.760740][T31340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1265.786887][T31340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1265.824287][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1265.908652][T31320] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1265.920778][T31320] Memory cgroup stats for /syz4: cache:64KB rss:17732KB rss_huge:16384KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17676KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1265.950975][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1265.959873][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1265.975666][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1265.987171][T31320] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30706,uid=0 [ 1266.007593][T31320] Memory cgroup out of memory: Kill process 30706 (syz-executor4) score 9015000 or sacrifice child [ 1266.011211][T31340] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1266.018472][T31320] Killed process 30706 (syz-executor4) total-vm:70532kB, anon-rss:2192kB, file-rss:33744kB, shmem-rss:0kB [ 1266.032355][T31340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1266.053726][ T1042] oom_reaper: reaped process 31319 (syz-executor4), now anon-rss:0kB, file-rss:31808kB, shmem-rss:0kB [ 1266.076678][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1266.093430][T31340] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1266.112485][T31340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.126486][T27087] CPU: 1 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1266.135506][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.145548][T27087] Call Trace: [ 1266.148835][T27087] dump_stack+0x1db/0x2d0 [ 1266.153162][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1266.158883][T27087] dump_header+0x1e6/0x11a6 [ 1266.163388][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1266.169022][T27087] ? print_usage_bug+0xd0/0xd0 [ 1266.173776][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1266.179399][T27087] ? ___ratelimit+0x37c/0x686 [ 1266.184073][T27087] ? mark_held_locks+0xb1/0x100 [ 1266.188958][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1266.194749][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1266.200528][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1266.205788][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1266.210784][T27087] ? kasan_check_read+0x11/0x20 [ 1266.215607][T27087] ? ___ratelimit+0x37c/0x686 [ 1266.220256][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1266.226036][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1266.231301][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1266.237004][T27087] ? lock_acquire+0x1db/0x570 [ 1266.241659][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1266.247448][T27087] ? ___ratelimit+0xac/0x686 [ 1266.252027][T27087] ? idr_get_free+0xee0/0xee0 [ 1266.256760][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1266.262024][T27087] oom_kill_process.cold+0x10/0x9ca [ 1266.267194][T27087] ? cgroup_procs_next+0x70/0x70 [ 1266.272105][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1266.277290][T27087] ? oom_badness+0xa50/0xa50 [ 1266.281856][T27087] ? oom_evaluate_task+0x540/0x540 [ 1266.287029][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1266.292289][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1266.297029][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1266.303256][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1266.308880][T27087] out_of_memory+0x885/0x1420 [ 1266.313533][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1266.318444][T27087] ? oom_killer_disable+0x340/0x340 [ 1266.323631][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1266.329408][T27087] ? lock_acquire+0x1db/0x570 [ 1266.334079][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1266.339596][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1266.344684][T27087] ? memory_oom_group_write+0x160/0x160 [ 1266.350212][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1266.355480][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1266.360316][T27087] try_charge+0x1407/0x1d30 [ 1266.364793][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1266.371027][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1266.376551][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1266.382162][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1266.387678][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1266.393534][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1266.399230][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1266.404492][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1266.409863][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1266.416075][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1266.422293][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1266.427899][T27087] wp_page_copy+0x45a/0x1c70 [ 1266.432460][T27087] ? swp_swapcount+0x540/0x540 [ 1266.437199][T27087] ? __lock_acquire+0x572/0x4a10 [ 1266.442130][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1266.446344][T27087] ? find_held_lock+0x35/0x120 [ 1266.451083][T27087] ? do_wp_page+0x894/0x1e80 [ 1266.455651][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1266.461870][T27087] ? kasan_check_read+0x11/0x20 [ 1266.466698][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1266.471796][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1266.477057][T27087] ? print_usage_bug+0xd0/0xd0 [ 1266.481812][T27087] do_wp_page+0x89c/0x1e80 [ 1266.486210][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1266.491572][T27087] ? kernel_text_address+0x73/0xf0 [ 1266.496682][T27087] ? lock_acquire+0x1db/0x570 [ 1266.501419][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1266.506697][T27087] ? kasan_check_write+0x14/0x20 [ 1266.511614][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1266.516609][T27087] ? lock_release+0xc40/0xc40 [ 1266.521259][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1266.526173][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1266.531963][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1266.537662][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1266.542755][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1266.548272][T27087] ? check_preemption_disabled+0x48/0x290 [ 1266.553969][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1266.558886][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1266.563713][T27087] ? kasan_check_read+0x11/0x20 [ 1266.568539][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1266.574496][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1266.580103][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1266.586328][T27087] ? check_preemption_disabled+0x48/0x290 [ 1266.592024][T27087] handle_mm_fault+0x4ec/0xc80 [ 1266.596763][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1266.602030][T27087] __do_page_fault+0x5ef/0xda0 [ 1266.606783][T27087] do_page_fault+0xe6/0x7d8 [ 1266.611261][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1266.616867][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1266.621689][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1266.627817][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1266.633420][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1266.639634][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1266.645342][T27087] ? page_fault+0x8/0x30 [ 1266.649563][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1266.655082][T27087] ? page_fault+0x8/0x30 [ 1266.659310][T27087] page_fault+0x1e/0x30 [ 1266.663440][T27087] RIP: 0033:0x42f05a [ 1266.667319][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1266.686893][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1266.692929][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1266.700879][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1266.708842][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1266.716789][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1266.724742][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1266.736866][T27087] memory: usage 23524kB, limit 0kB, failcnt 89 [ 1266.743082][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1266.778962][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1266.801146][T27087] Memory cgroup stats for /syz4: cache:64KB rss:13424KB rss_huge:12288KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13380KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1266.822860][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=29661,uid=0 [ 1266.838138][T27087] Memory cgroup out of memory: Kill process 29661 (syz-executor4) score 9014000 or sacrifice child [ 1266.838273][T27087] Killed process 29661 (syz-executor4) total-vm:70400kB, anon-rss:2184kB, file-rss:33748kB, shmem-rss:0kB [ 1266.862012][ T1042] oom_reaper: reaped process 29661 (syz-executor4), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 1266.870998][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1266.890665][T27087] CPU: 1 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1266.899697][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.909753][T27087] Call Trace: [ 1266.913021][T27087] dump_stack+0x1db/0x2d0 [ 1266.917326][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1266.923041][T27087] dump_header+0x1e6/0x11a6 [ 1266.927525][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1266.933135][T27087] ? print_usage_bug+0xd0/0xd0 [ 1266.937888][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1266.943498][T27087] ? ___ratelimit+0x37c/0x686 [ 1266.948330][T27087] ? mark_held_locks+0xb1/0x100 [ 1266.953157][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1266.958954][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1266.964737][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1266.969997][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1266.975006][T27087] ? kasan_check_read+0x11/0x20 [ 1266.979839][T27087] ? ___ratelimit+0x37c/0x686 [ 1266.984488][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1266.990304][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1266.995569][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1267.001263][T27087] ? lock_acquire+0x1db/0x570 [ 1267.005929][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1267.011710][T27087] ? ___ratelimit+0xac/0x686 [ 1267.016278][T27087] ? idr_get_free+0xee0/0xee0 [ 1267.020954][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1267.026235][T27087] oom_kill_process.cold+0x10/0x9ca [ 1267.031411][T27087] ? cgroup_procs_next+0x70/0x70 [ 1267.036353][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1267.041532][T27087] ? oom_badness+0xa50/0xa50 [ 1267.046101][T27087] ? oom_evaluate_task+0x540/0x540 [ 1267.051190][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1267.056461][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1267.061209][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.067445][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1267.073176][T27087] out_of_memory+0x885/0x1420 [ 1267.077829][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1267.082739][T27087] ? oom_killer_disable+0x340/0x340 [ 1267.087910][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1267.093693][T27087] ? lock_acquire+0x1db/0x570 [ 1267.098349][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1267.103881][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1267.108968][T27087] ? memory_oom_group_write+0x160/0x160 [ 1267.114485][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1267.119756][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1267.124583][T27087] try_charge+0x1407/0x1d30 [ 1267.129060][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.135279][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1267.140801][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1267.146413][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1267.151934][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1267.157632][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1267.163330][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1267.168592][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1267.173945][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1267.180160][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1267.186381][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1267.191992][T27087] wp_page_copy+0x45a/0x1c70 [ 1267.196569][T27087] ? swp_swapcount+0x540/0x540 [ 1267.201310][T27087] ? __lock_acquire+0x572/0x4a10 [ 1267.206226][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1267.210445][T27087] ? find_held_lock+0x35/0x120 [ 1267.215189][T27087] ? do_wp_page+0x894/0x1e80 [ 1267.219756][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1267.225977][T27087] ? kasan_check_read+0x11/0x20 [ 1267.230801][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1267.235888][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1267.241154][T27087] ? print_usage_bug+0xd0/0xd0 [ 1267.245915][T27087] do_wp_page+0x89c/0x1e80 [ 1267.250329][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1267.255675][T27087] ? kernel_text_address+0x73/0xf0 [ 1267.260763][T27087] ? lock_acquire+0x1db/0x570 [ 1267.265415][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1267.270677][T27087] ? kasan_check_write+0x14/0x20 [ 1267.275593][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1267.280590][T27087] ? lock_release+0xc40/0xc40 [ 1267.285243][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1267.290153][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1267.295933][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1267.301627][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1267.306713][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1267.312236][T27087] ? check_preemption_disabled+0x48/0x290 [ 1267.317931][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1267.322851][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1267.327675][T27087] ? kasan_check_read+0x11/0x20 [ 1267.332500][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1267.338456][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1267.344065][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1267.350279][T27087] ? check_preemption_disabled+0x48/0x290 [ 1267.355975][T27087] handle_mm_fault+0x4ec/0xc80 [ 1267.360714][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1267.365989][T27087] __do_page_fault+0x5ef/0xda0 [ 1267.370732][T27087] do_page_fault+0xe6/0x7d8 [ 1267.375386][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1267.380996][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1267.385818][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1267.391948][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1267.397553][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.403772][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1267.409464][T27087] ? page_fault+0x8/0x30 [ 1267.413691][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1267.419228][T27087] ? page_fault+0x8/0x30 [ 1267.423445][T27087] page_fault+0x1e/0x30 [ 1267.427589][T27087] RIP: 0033:0x42f05a [ 1267.431460][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1267.451039][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1267.457082][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1267.465035][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1267.472983][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1267.480945][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1267.488895][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1267.499764][T27087] memory: usage 21220kB, limit 0kB, failcnt 95 [ 1267.506184][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1267.513736][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1267.522089][T27087] Memory cgroup stats for /syz4: cache:64KB rss:11280KB rss_huge:10240KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:11232KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1267.545357][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=29651,uid=0 [ 1267.561282][T27087] Memory cgroup out of memory: Kill process 29651 (syz-executor4) score 9013000 or sacrifice child [ 1267.574970][T27087] Killed process 29651 (syz-executor4) total-vm:70400kB, anon-rss:2184kB, file-rss:33744kB, shmem-rss:0kB [ 1267.602666][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1267.612914][T27087] CPU: 1 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1267.612926][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.631951][T27087] Call Trace: [ 1267.631971][T27087] dump_stack+0x1db/0x2d0 [ 1267.631990][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1267.632020][T27087] dump_header+0x1e6/0x11a6 [ 1267.639583][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1267.639598][T27087] ? print_usage_bug+0xd0/0xd0 [ 1267.639618][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1267.649787][T27087] ? ___ratelimit+0x37c/0x686 [ 1267.649811][T27087] ? mark_held_locks+0xb1/0x100 [ 1267.660153][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1267.660168][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1267.660185][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1267.670440][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1267.670454][T27087] ? kasan_check_read+0x11/0x20 [ 1267.670470][T27087] ? ___ratelimit+0x37c/0x686 [ 1267.681076][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1267.681091][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1267.681108][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1267.692148][T27087] ? lock_acquire+0x1db/0x570 [ 1267.692172][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1267.692185][T27087] ? ___ratelimit+0xac/0x686 [ 1267.692202][T27087] ? idr_get_free+0xee0/0xee0 [ 1267.702025][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1267.702051][T27087] oom_kill_process.cold+0x10/0x9ca [ 1267.702070][T27087] ? cgroup_procs_next+0x70/0x70 [ 1267.702089][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1267.712518][T27087] ? oom_badness+0xa50/0xa50 [ 1267.712539][T27087] ? oom_evaluate_task+0x540/0x540 [ 1267.712555][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1267.712572][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1267.723625][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.723658][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1267.723679][T27087] out_of_memory+0x885/0x1420 [ 1267.723697][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1267.734148][T27087] ? oom_killer_disable+0x340/0x340 [ 1267.748636][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1267.748655][T27087] ? lock_acquire+0x1db/0x570 [ 1267.758762][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1267.758780][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1267.768514][T27087] ? memory_oom_group_write+0x160/0x160 [ 1267.768527][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1267.768551][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1267.778904][T27087] try_charge+0x1407/0x1d30 [ 1267.778918][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.778939][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1267.789894][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1267.789920][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1267.800177][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1267.800204][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1267.810295][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1267.810321][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1267.820873][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1267.820891][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1267.831500][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1267.831519][T27087] wp_page_copy+0x45a/0x1c70 [ 1267.831532][T27087] ? swp_swapcount+0x540/0x540 [ 1267.831545][T27087] ? __lock_acquire+0x572/0x4a10 [ 1267.831566][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1267.842340][T27087] ? find_held_lock+0x35/0x120 [ 1267.842356][T27087] ? do_wp_page+0x894/0x1e80 [ 1267.842374][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1267.842395][T27087] ? kasan_check_read+0x11/0x20 [ 1267.842414][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1267.851717][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1267.851736][T27087] ? print_usage_bug+0xd0/0xd0 [ 1267.851757][T27087] do_wp_page+0x89c/0x1e80 [ 1267.851779][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1267.863509][T27087] ? kernel_text_address+0x73/0xf0 [ 1267.863528][T27087] ? lock_acquire+0x1db/0x570 [ 1267.863543][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1267.863560][T27087] ? kasan_check_write+0x14/0x20 [ 1267.863578][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1267.874704][T27087] ? lock_release+0xc40/0xc40 [ 1267.874722][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1267.874741][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1267.886123][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1267.886148][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1267.886174][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1267.886189][T27087] ? check_preemption_disabled+0x48/0x290 [ 1267.886206][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1267.896826][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1267.896844][T27087] ? kasan_check_read+0x11/0x20 [ 1267.909273][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1267.909290][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1267.909309][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1267.919479][T27087] ? check_preemption_disabled+0x48/0x290 [ 1267.919499][T27087] handle_mm_fault+0x4ec/0xc80 [ 1267.919517][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1267.929181][T27087] __do_page_fault+0x5ef/0xda0 [ 1267.929207][T27087] do_page_fault+0xe6/0x7d8 [ 1267.938155][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1267.938173][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1267.938190][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1267.948967][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1267.948982][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.949001][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1267.958904][T27087] ? page_fault+0x8/0x30 [ 1267.958921][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1267.958938][T27087] ? page_fault+0x8/0x30 [ 1267.968935][T27087] page_fault+0x1e/0x30 [ 1267.968947][T27087] RIP: 0033:0x42f05a [ 1267.968965][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1267.978689][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1267.978701][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1267.978709][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1267.978722][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1267.988453][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1267.988462][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1268.003858][T27087] memory: usage 18916kB, limit 0kB, failcnt 101 [ 1268.020407][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1268.036955][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1268.052527][T27087] Memory cgroup stats for /syz4: cache:64KB rss:9132KB rss_huge:8192KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:9084KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1268.052608][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=29673,uid=0 [ 1268.063443][T27087] Memory cgroup out of memory: Kill process 29673 (syz-executor4) score 9013000 or sacrifice child [ 1268.063504][T27087] Killed process 29673 (syz-executor4) total-vm:70400kB, anon-rss:2184kB, file-rss:33744kB, shmem-rss:0kB [ 1268.064972][ T1042] oom_reaper: reaped process 29673 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB [ 1268.082783][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1268.095972][T27087] CPU: 1 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1268.116951][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.116957][T27087] Call Trace: [ 1268.116976][T27087] dump_stack+0x1db/0x2d0 [ 1268.116995][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1268.128853][T27087] dump_header+0x1e6/0x11a6 [ 1268.128872][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1268.138778][T27087] ? print_usage_bug+0xd0/0xd0 [ 1268.138795][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1268.138810][T27087] ? ___ratelimit+0x37c/0x686 [ 1268.148552][T27087] ? mark_held_locks+0xb1/0x100 [ 1268.148568][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1268.148586][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1268.156586][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1268.156605][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1268.156624][T27087] ? kasan_check_read+0x11/0x20 [ 1268.182231][T27087] ? ___ratelimit+0x37c/0x686 [ 1268.182247][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1268.182261][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1268.182275][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1268.182291][T27087] ? lock_acquire+0x1db/0x570 [ 1268.198199][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1268.198231][T27087] ? ___ratelimit+0xac/0x686 [ 1268.198247][T27087] ? idr_get_free+0xee0/0xee0 [ 1268.198260][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1268.198285][T27087] oom_kill_process.cold+0x10/0x9ca [ 1268.214195][T27087] ? cgroup_procs_next+0x70/0x70 [ 1268.214215][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1268.214231][T27087] ? oom_badness+0xa50/0xa50 [ 1268.214253][T27087] ? oom_evaluate_task+0x540/0x540 [ 1268.481536][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1268.486794][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1268.491543][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.497764][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1268.503375][T27087] out_of_memory+0x885/0x1420 [ 1268.508029][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1268.512959][T27087] ? oom_killer_disable+0x340/0x340 [ 1268.518133][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1268.523924][T27087] ? lock_acquire+0x1db/0x570 [ 1268.528584][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1268.534116][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1268.539226][T27087] ? memory_oom_group_write+0x160/0x160 [ 1268.544743][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1268.550005][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1268.554833][T27087] try_charge+0x1407/0x1d30 [ 1268.559309][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.565535][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1268.571057][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1268.576666][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1268.582188][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1268.587882][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1268.593592][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1268.598852][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1268.604210][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1268.610422][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1268.616638][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1268.622246][T27087] wp_page_copy+0x45a/0x1c70 [ 1268.626813][T27087] ? swp_swapcount+0x540/0x540 [ 1268.631578][T27087] ? __lock_acquire+0x572/0x4a10 [ 1268.636494][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1268.640720][T27087] ? find_held_lock+0x35/0x120 [ 1268.645475][T27087] ? do_wp_page+0x894/0x1e80 [ 1268.650059][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1268.656303][T27087] ? kasan_check_read+0x11/0x20 [ 1268.661155][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1268.666250][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1268.666265][T27087] ? print_usage_bug+0xd0/0xd0 [ 1268.666283][T27087] do_wp_page+0x89c/0x1e80 [ 1268.666300][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1268.686055][T27087] ? kernel_text_address+0x73/0xf0 [ 1268.691156][T27087] ? lock_acquire+0x1db/0x570 [ 1268.695812][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1268.701074][T27087] ? kasan_check_write+0x14/0x20 [ 1268.705986][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1268.710980][T27087] ? lock_release+0xc40/0xc40 [ 1268.715732][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1268.720641][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1268.726417][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1268.732112][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1268.737196][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1268.742716][T27087] ? check_preemption_disabled+0x48/0x290 [ 1268.748417][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1268.753336][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1268.758160][T27087] ? kasan_check_read+0x11/0x20 [ 1268.762987][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1268.768941][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1268.774549][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1268.780780][T27087] ? check_preemption_disabled+0x48/0x290 [ 1268.786480][T27087] handle_mm_fault+0x4ec/0xc80 [ 1268.791218][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1268.796481][T27087] __do_page_fault+0x5ef/0xda0 [ 1268.801225][T27087] do_page_fault+0xe6/0x7d8 [ 1268.805710][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1268.811318][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1268.816145][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1268.822290][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1268.827896][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1268.834108][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1268.839802][T27087] ? page_fault+0x8/0x30 [ 1268.844039][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1268.849562][T27087] ? page_fault+0x8/0x30 [ 1268.853777][T27087] page_fault+0x1e/0x30 [ 1268.857908][T27087] RIP: 0033:0x42f05a [ 1268.861783][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1268.881374][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1268.887408][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1268.895357][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1268.903297][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1268.911239][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1268.919181][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1268.929024][T27087] memory: usage 16600kB, limit 0kB, failcnt 107 [ 1268.935965][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1268.943522][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1268.950358][T27087] Memory cgroup stats for /syz4: cache:64KB rss:6972KB rss_huge:6144KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6924KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1268.971625][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30106,uid=0 [ 1268.986884][T27087] Memory cgroup out of memory: Kill process 30106 (syz-executor4) score 9012000 or sacrifice child [ 1268.997643][T27087] Killed process 30106 (syz-executor4) total-vm:70400kB, anon-rss:2184kB, file-rss:33740kB, shmem-rss:0kB [ 1269.011017][ T1042] oom_reaper: reaped process 30106 (syz-executor4), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 1269.029615][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1269.043046][T27087] CPU: 0 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1269.052063][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.062192][T27087] Call Trace: [ 1269.065478][T27087] dump_stack+0x1db/0x2d0 [ 1269.069822][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1269.075526][T27087] dump_header+0x1e6/0x11a6 [ 1269.080007][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1269.085628][T27087] ? print_usage_bug+0xd0/0xd0 [ 1269.090396][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1269.096003][T27087] ? ___ratelimit+0x37c/0x686 [ 1269.100660][T27087] ? mark_held_locks+0xb1/0x100 [ 1269.105507][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1269.111295][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1269.117074][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1269.122341][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1269.127357][T27087] ? kasan_check_read+0x11/0x20 [ 1269.132193][T27087] ? ___ratelimit+0x37c/0x686 [ 1269.136858][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1269.142653][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1269.147922][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1269.153625][T27087] ? lock_acquire+0x1db/0x570 [ 1269.158279][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1269.164065][T27087] ? ___ratelimit+0xac/0x686 [ 1269.168636][T27087] ? idr_get_free+0xee0/0xee0 [ 1269.173298][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1269.178563][T27087] oom_kill_process.cold+0x10/0x9ca [ 1269.183748][T27087] ? cgroup_procs_next+0x70/0x70 [ 1269.188684][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1269.193863][T27087] ? oom_badness+0xa50/0xa50 [ 1269.198427][T27087] ? oom_evaluate_task+0x540/0x540 [ 1269.203528][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1269.208796][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1269.213534][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.219752][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1269.225378][T27087] out_of_memory+0x885/0x1420 [ 1269.230043][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1269.234954][T27087] ? oom_killer_disable+0x340/0x340 [ 1269.240128][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1269.245915][T27087] ? lock_acquire+0x1db/0x570 [ 1269.250581][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1269.256099][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1269.261184][T27087] ? memory_oom_group_write+0x160/0x160 [ 1269.266708][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1269.271983][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1269.276807][T27087] try_charge+0x1407/0x1d30 [ 1269.281281][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.287509][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1269.293044][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1269.298664][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1269.304196][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1269.309901][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1269.315594][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1269.320852][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1269.326227][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1269.332455][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1269.338668][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1269.344290][T27087] wp_page_copy+0x45a/0x1c70 [ 1269.348863][T27087] ? swp_swapcount+0x540/0x540 [ 1269.353600][T27087] ? __lock_acquire+0x572/0x4a10 [ 1269.358515][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1269.362740][T27087] ? find_held_lock+0x35/0x120 [ 1269.367500][T27087] ? do_wp_page+0x894/0x1e80 [ 1269.372073][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1269.378285][T27087] ? kasan_check_read+0x11/0x20 [ 1269.383113][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1269.388205][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1269.393460][T27087] ? print_usage_bug+0xd0/0xd0 [ 1269.398199][T27087] do_wp_page+0x89c/0x1e80 [ 1269.402617][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1269.407984][T27087] ? kernel_text_address+0x73/0xf0 [ 1269.413205][T27087] ? lock_acquire+0x1db/0x570 [ 1269.417861][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1269.423155][T27087] ? kasan_check_write+0x14/0x20 [ 1269.428079][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1269.433094][T27087] ? lock_release+0xc40/0xc40 [ 1269.437751][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1269.442672][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1269.448463][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1269.454162][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1269.459254][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1269.464787][T27087] ? check_preemption_disabled+0x48/0x290 [ 1269.470490][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1269.475410][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1269.480233][T27087] ? kasan_check_read+0x11/0x20 [ 1269.485069][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1269.491032][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1269.496641][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1269.502865][T27087] ? check_preemption_disabled+0x48/0x290 [ 1269.508569][T27087] handle_mm_fault+0x4ec/0xc80 [ 1269.513305][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1269.518561][T27087] __do_page_fault+0x5ef/0xda0 [ 1269.523321][T27087] do_page_fault+0xe6/0x7d8 [ 1269.527807][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1269.533414][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1269.538236][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1269.544373][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1269.549988][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.556208][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1269.562132][T27087] ? page_fault+0x8/0x30 [ 1269.566365][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1269.572003][T27087] ? page_fault+0x8/0x30 [ 1269.576256][T27087] page_fault+0x1e/0x30 [ 1269.580380][T27087] RIP: 0033:0x42f05a [ 1269.584254][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1269.603852][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1269.610008][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1269.617963][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1269.625914][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1269.633871][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1269.641829][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1269.654290][T27087] memory: usage 14288kB, limit 0kB, failcnt 113 [ 1269.660579][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1269.674649][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1269.682620][T27087] Memory cgroup stats for /syz4: cache:64KB rss:4836KB rss_huge:4096KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4776KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1269.704591][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30123,uid=0 [ 1269.720308][T27087] Memory cgroup out of memory: Kill process 30123 (syz-executor4) score 9012000 or sacrifice child [ 1269.731149][T27087] Killed process 30123 (syz-executor4) total-vm:70400kB, anon-rss:2184kB, file-rss:33740kB, shmem-rss:0kB [ 1269.743982][ T1042] oom_reaper: reaped process 30123 (syz-executor4), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 1269.766937][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1269.777097][T27087] CPU: 0 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1269.786096][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.796123][T27087] Call Trace: [ 1269.799391][T27087] dump_stack+0x1db/0x2d0 [ 1269.803708][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1269.809425][T27087] dump_header+0x1e6/0x11a6 [ 1269.813913][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1269.819526][T27087] ? print_usage_bug+0xd0/0xd0 [ 1269.824275][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1269.829910][T27087] ? ___ratelimit+0x37c/0x686 [ 1269.834578][T27087] ? mark_held_locks+0xb1/0x100 [ 1269.839415][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1269.845196][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1269.850980][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1269.856252][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1269.861246][T27087] ? kasan_check_read+0x11/0x20 [ 1269.866070][T27087] ? ___ratelimit+0x37c/0x686 [ 1269.870724][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1269.876505][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1269.881777][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1269.887479][T27087] ? lock_acquire+0x1db/0x570 [ 1269.892144][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1269.897927][T27087] ? ___ratelimit+0xac/0x686 [ 1269.902503][T27087] ? idr_get_free+0xee0/0xee0 [ 1269.907178][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1269.912453][T27087] oom_kill_process.cold+0x10/0x9ca [ 1269.917635][T27087] ? cgroup_procs_next+0x70/0x70 [ 1269.922557][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1269.927741][T27087] ? oom_badness+0xa50/0xa50 [ 1269.932322][T27087] ? oom_evaluate_task+0x540/0x540 [ 1269.937418][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1269.942686][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1269.947471][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1269.953714][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1269.959332][T27087] out_of_memory+0x885/0x1420 [ 1269.963993][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1269.968913][T27087] ? oom_killer_disable+0x340/0x340 [ 1269.974085][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1269.979873][T27087] ? lock_acquire+0x1db/0x570 [ 1269.984554][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1269.990097][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1269.995181][T27087] ? memory_oom_group_write+0x160/0x160 [ 1270.000695][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1270.005987][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1270.010810][T27087] try_charge+0x1407/0x1d30 [ 1270.015296][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.021529][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1270.027060][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1270.032680][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1270.038212][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1270.043926][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1270.049650][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1270.054910][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1270.060262][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1270.066486][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1270.072722][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1270.078340][T27087] wp_page_copy+0x45a/0x1c70 [ 1270.082911][T27087] ? swp_swapcount+0x540/0x540 [ 1270.087658][T27087] ? __lock_acquire+0x572/0x4a10 [ 1270.092581][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1270.096801][T27087] ? find_held_lock+0x35/0x120 [ 1270.101542][T27087] ? do_wp_page+0x894/0x1e80 [ 1270.106114][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1270.112368][T27087] ? kasan_check_read+0x11/0x20 [ 1270.117197][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1270.122289][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1270.127577][T27087] ? print_usage_bug+0xd0/0xd0 [ 1270.132336][T27087] do_wp_page+0x89c/0x1e80 [ 1270.136737][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1270.142089][T27087] ? kernel_text_address+0x73/0xf0 [ 1270.147185][T27087] ? lock_acquire+0x1db/0x570 [ 1270.151861][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1270.157129][T27087] ? kasan_check_write+0x14/0x20 [ 1270.162049][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1270.167051][T27087] ? lock_release+0xc40/0xc40 [ 1270.171714][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1270.176638][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1270.182440][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1270.188156][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1270.193256][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1270.198781][T27087] ? check_preemption_disabled+0x48/0x290 [ 1270.204484][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1270.209410][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1270.214239][T27087] ? kasan_check_read+0x11/0x20 [ 1270.219064][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1270.225022][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1270.230644][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1270.236856][T27087] ? check_preemption_disabled+0x48/0x290 [ 1270.242569][T27087] handle_mm_fault+0x4ec/0xc80 [ 1270.247328][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1270.252605][T27087] __do_page_fault+0x5ef/0xda0 [ 1270.257359][T27087] do_page_fault+0xe6/0x7d8 [ 1270.261848][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1270.267468][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1270.272305][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1270.278444][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1270.284063][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.290291][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1270.295980][T27087] ? page_fault+0x8/0x30 [ 1270.300196][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1270.305721][T27087] ? page_fault+0x8/0x30 [ 1270.309935][T27087] page_fault+0x1e/0x30 [ 1270.314087][T27087] RIP: 0033:0x42f05a [ 1270.317962][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1270.337536][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1270.343582][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1270.351544][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1270.359515][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1270.367462][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1270.375421][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1270.384555][T27087] memory: usage 11984kB, limit 0kB, failcnt 197 [ 1270.390796][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1270.398581][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1270.405457][T27087] Memory cgroup stats for /syz4: cache:64KB rss:2688KB rss_huge:2048KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2628KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1270.426600][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30002,uid=0 [ 1270.442062][T27087] Memory cgroup out of memory: Kill process 30002 (syz-executor4) score 9011000 or sacrifice child [ 1270.452978][T27087] Killed process 30002 (syz-executor4) total-vm:70400kB, anon-rss:2184kB, file-rss:33736kB, shmem-rss:0kB [ 1270.468985][ T1042] oom_reaper: reaped process 30002 (syz-executor4), now anon-rss:0kB, file-rss:32776kB, shmem-rss:0kB [ 1270.490186][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1270.500342][T27087] CPU: 0 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1270.509346][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.519384][T27087] Call Trace: [ 1270.522661][T27087] dump_stack+0x1db/0x2d0 [ 1270.522687][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1270.522715][T27087] dump_header+0x1e6/0x11a6 [ 1270.522733][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1270.522751][T27087] ? print_usage_bug+0xd0/0xd0 [ 1270.522770][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1270.522785][T27087] ? ___ratelimit+0x37c/0x686 [ 1270.522804][T27087] ? mark_held_locks+0xb1/0x100 [ 1270.537294][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1270.547645][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1270.557902][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1270.568510][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1270.579688][T27087] ? kasan_check_read+0x11/0x20 [ 1270.589514][T27087] ? ___ratelimit+0x37c/0x686 [ 1270.594178][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1270.594193][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1270.594208][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1270.594221][T27087] ? lock_acquire+0x1db/0x570 [ 1270.594241][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1270.594256][T27087] ? ___ratelimit+0xac/0x686 [ 1270.610993][T27087] ? idr_get_free+0xee0/0xee0 [ 1270.621418][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1270.635895][T27087] oom_kill_process.cold+0x10/0x9ca [ 1270.641070][T27087] ? cgroup_procs_next+0x70/0x70 [ 1270.646022][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1270.651218][T27087] ? oom_badness+0xa50/0xa50 [ 1270.655787][T27087] ? oom_evaluate_task+0x540/0x540 [ 1270.660874][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1270.666149][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1270.670896][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.677114][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1270.682750][T27087] out_of_memory+0x885/0x1420 [ 1270.687414][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1270.692352][T27087] ? oom_killer_disable+0x340/0x340 [ 1270.697532][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1270.703322][T27087] ? lock_acquire+0x1db/0x570 [ 1270.707986][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1270.713503][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1270.718599][T27087] ? memory_oom_group_write+0x160/0x160 [ 1270.724125][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1270.729400][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1270.734234][T27087] try_charge+0x1407/0x1d30 [ 1270.738707][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.744938][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1270.750468][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1270.756074][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1270.761605][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1270.767314][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1270.773012][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1270.778355][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1270.783717][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1270.790034][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1270.796251][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1270.801867][T27087] wp_page_copy+0x45a/0x1c70 [ 1270.806443][T27087] ? swp_swapcount+0x540/0x540 [ 1270.811185][T27087] ? __lock_acquire+0x572/0x4a10 [ 1270.816098][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1270.820322][T27087] ? find_held_lock+0x35/0x120 [ 1270.825086][T27087] ? do_wp_page+0x894/0x1e80 [ 1270.829661][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1270.835874][T27087] ? kasan_check_read+0x11/0x20 [ 1270.840694][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1270.845791][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1270.851057][T27087] ? print_usage_bug+0xd0/0xd0 [ 1270.855806][T27087] do_wp_page+0x89c/0x1e80 [ 1270.860230][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1270.865589][T27087] ? kernel_text_address+0x73/0xf0 [ 1270.870683][T27087] ? lock_acquire+0x1db/0x570 [ 1270.875332][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1270.880588][T27087] ? kasan_check_write+0x14/0x20 [ 1270.885505][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1270.890505][T27087] ? lock_release+0xc40/0xc40 [ 1270.895156][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1270.900067][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1270.905854][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1270.911565][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1270.916810][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1270.922342][T27087] ? check_preemption_disabled+0x48/0x290 [ 1270.928044][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1270.932962][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1270.937785][T27087] ? kasan_check_read+0x11/0x20 [ 1270.942615][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1270.948581][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1270.954187][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1270.960403][T27087] ? check_preemption_disabled+0x48/0x290 [ 1270.966112][T27087] handle_mm_fault+0x4ec/0xc80 [ 1270.970860][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1270.976124][T27087] __do_page_fault+0x5ef/0xda0 [ 1270.980866][T27087] do_page_fault+0xe6/0x7d8 [ 1270.985347][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1270.990962][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1270.995788][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1271.001931][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1271.007556][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.013771][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1271.019462][T27087] ? page_fault+0x8/0x30 [ 1271.023694][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1271.029226][T27087] ? page_fault+0x8/0x30 [ 1271.033451][T27087] page_fault+0x1e/0x30 [ 1271.037613][T27087] RIP: 0033:0x42f05a [ 1271.041485][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1271.061083][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1271.067121][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1271.075082][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1271.083048][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1271.091003][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1271.098947][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1271.107639][T27087] memory: usage 9680kB, limit 0kB, failcnt 287 [ 1271.113896][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1271.121365][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1271.128254][T21274] Memory cgroup stats for /syz4: cache:64KB [ 1271.128277][T27087] rss:540KB rss_huge:0KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:480KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1271.151354][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30214,uid=0 [ 1271.166672][T27087] Memory cgroup out of memory: Kill process 30214 (syz-executor4) score 8505000 or sacrifice child [ 1271.166727][T27087] Killed process 30214 (syz-executor4) total-vm:70532kB, anon-rss:152kB, file-rss:33744kB, shmem-rss:0kB [ 1271.189226][ T1042] oom_reaper: reaped process 30214 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB [ 1271.207368][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1271.217482][T27087] CPU: 0 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1271.226484][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.226489][T27087] Call Trace: [ 1271.226508][T27087] dump_stack+0x1db/0x2d0 [ 1271.226528][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1271.226555][T27087] dump_header+0x1e6/0x11a6 [ 1271.226572][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1271.226589][T27087] ? print_usage_bug+0xd0/0xd0 [ 1271.226608][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1271.254410][T27087] ? ___ratelimit+0x37c/0x686 [ 1271.254432][T27087] ? mark_held_locks+0xb1/0x100 [ 1271.254449][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1271.254465][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1271.254480][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1271.254496][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1271.254510][T27087] ? kasan_check_read+0x11/0x20 [ 1271.254525][T27087] ? ___ratelimit+0x37c/0x686 [ 1271.270485][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1271.279954][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1271.291502][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1271.291515][T27087] ? lock_acquire+0x1db/0x570 [ 1271.291536][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1271.291550][T27087] ? ___ratelimit+0xac/0x686 [ 1271.291583][T27087] ? idr_get_free+0xee0/0xee0 [ 1271.301836][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1271.301862][T27087] oom_kill_process.cold+0x10/0x9ca [ 1271.301886][T27087] ? cgroup_procs_next+0x70/0x70 [ 1271.301905][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1271.301921][T27087] ? oom_badness+0xa50/0xa50 [ 1271.301941][T27087] ? oom_evaluate_task+0x540/0x540 [ 1271.301955][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1271.301965][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1271.301983][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.317262][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1271.332861][T27087] out_of_memory+0x885/0x1420 [ 1271.332884][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1271.332902][T27087] ? oom_killer_disable+0x340/0x340 [ 1271.332920][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1271.343265][T27087] ? lock_acquire+0x1db/0x570 [ 1271.343290][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1271.343303][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1271.343320][T27087] ? memory_oom_group_write+0x160/0x160 [ 1271.343334][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1271.343359][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1271.343376][T27087] try_charge+0x1407/0x1d30 [ 1271.343390][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.343411][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1271.353325][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1271.363429][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1271.363446][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1271.363466][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1271.363483][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1271.363500][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1271.363545][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1271.378361][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1271.388369][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1271.400182][T27087] wp_page_copy+0x45a/0x1c70 [ 1271.420682][T27087] ? swp_swapcount+0x540/0x540 [ 1271.528125][T27087] ? __lock_acquire+0x572/0x4a10 [ 1271.533054][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1271.537280][T27087] ? find_held_lock+0x35/0x120 [ 1271.542027][T27087] ? do_wp_page+0x894/0x1e80 [ 1271.546608][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1271.552837][T27087] ? kasan_check_read+0x11/0x20 [ 1271.557677][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1271.562936][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1271.568205][T27087] ? print_usage_bug+0xd0/0xd0 [ 1271.572956][T27087] do_wp_page+0x89c/0x1e80 [ 1271.577360][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1271.582715][T27087] ? kernel_text_address+0x73/0xf0 [ 1271.587808][T27087] ? lock_acquire+0x1db/0x570 [ 1271.592470][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1271.597741][T27087] ? kasan_check_write+0x14/0x20 [ 1271.602680][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1271.607686][T27087] ? lock_release+0xc40/0xc40 [ 1271.612349][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1271.617268][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1271.623059][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1271.628765][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1271.633870][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1271.639398][T27087] ? check_preemption_disabled+0x48/0x290 [ 1271.645109][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1271.650026][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1271.654879][T27087] ? kasan_check_read+0x11/0x20 [ 1271.659731][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1271.665690][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1271.671296][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1271.677511][T27087] ? check_preemption_disabled+0x48/0x290 [ 1271.683221][T27087] handle_mm_fault+0x4ec/0xc80 [ 1271.687968][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1271.693263][T27087] __do_page_fault+0x5ef/0xda0 [ 1271.698018][T27087] do_page_fault+0xe6/0x7d8 [ 1271.702504][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1271.708151][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1271.712984][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1271.719129][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1271.724752][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.730976][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1271.736670][T27087] ? page_fault+0x8/0x30 [ 1271.740887][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1271.746410][T27087] ? page_fault+0x8/0x30 [ 1271.750643][T27087] page_fault+0x1e/0x30 [ 1271.754789][T27087] RIP: 0033:0x42f05a [ 1271.758665][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1271.778241][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1271.784278][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1271.792228][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1271.800177][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1271.808121][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1271.816064][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1271.828111][T27087] memory: usage 9240kB, limit 0kB, failcnt 353 [ 1271.834331][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1271.841828][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1271.848672][T27087] Memory cgroup stats for /syz4: cache:64KB rss:400KB rss_huge:0KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:360KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1271.869317][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=30246,uid=0 [ 1271.884601][T27087] Memory cgroup out of memory: Kill process 30246 (syz-executor4) score 8505000 or sacrifice child [ 1271.895364][T27087] Killed process 30246 (syz-executor4) total-vm:70532kB, anon-rss:152kB, file-rss:33744kB, shmem-rss:0kB [ 1271.907785][ T1042] oom_reaper: reaped process 30246 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB [ 1271.933258][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1271.943415][T27087] CPU: 0 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1271.952421][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.962462][T27087] Call Trace: [ 1271.965740][T27087] dump_stack+0x1db/0x2d0 [ 1271.970047][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1271.975747][T27087] dump_header+0x1e6/0x11a6 [ 1271.980223][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1271.985852][T27087] ? print_usage_bug+0xd0/0xd0 [ 1271.990599][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1271.996206][T27087] ? ___ratelimit+0x37c/0x686 [ 1272.000857][T27087] ? mark_held_locks+0xb1/0x100 [ 1272.005695][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1272.011490][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1272.017289][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1272.022565][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1272.027588][T27087] ? kasan_check_read+0x11/0x20 [ 1272.032421][T27087] ? ___ratelimit+0x37c/0x686 [ 1272.037079][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1272.042866][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1272.048128][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1272.053842][T27087] ? lock_acquire+0x1db/0x570 [ 1272.058504][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1272.064287][T27087] ? ___ratelimit+0xac/0x686 [ 1272.068859][T27087] ? idr_get_free+0xee0/0xee0 [ 1272.073507][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1272.078798][T27087] oom_kill_process.cold+0x10/0x9ca [ 1272.083986][T27087] ? cgroup_procs_next+0x70/0x70 [ 1272.088912][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1272.094086][T27087] ? oom_badness+0xa50/0xa50 [ 1272.098651][T27087] ? oom_evaluate_task+0x540/0x540 [ 1272.103746][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1272.109016][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1272.113754][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.119969][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1272.125610][T27087] out_of_memory+0x885/0x1420 [ 1272.130273][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1272.135187][T27087] ? oom_killer_disable+0x340/0x340 [ 1272.140357][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1272.146143][T27087] ? lock_acquire+0x1db/0x570 [ 1272.150807][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1272.156329][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1272.161444][T27087] ? memory_oom_group_write+0x160/0x160 [ 1272.166965][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1272.172248][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1272.177082][T27087] try_charge+0x1407/0x1d30 [ 1272.181576][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.187809][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1272.193332][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1272.199053][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1272.204602][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1272.210310][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1272.216007][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1272.221266][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1272.226632][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1272.232855][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1272.239068][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1272.244690][T27087] wp_page_copy+0x45a/0x1c70 [ 1272.249260][T27087] ? swp_swapcount+0x540/0x540 [ 1272.254000][T27087] ? __lock_acquire+0x572/0x4a10 [ 1272.258911][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1272.263135][T27087] ? find_held_lock+0x35/0x120 [ 1272.267880][T27087] ? do_wp_page+0x894/0x1e80 [ 1272.272449][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1272.278667][T27087] ? kasan_check_read+0x11/0x20 [ 1272.283501][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1272.288599][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1272.293858][T27087] ? print_usage_bug+0xd0/0xd0 [ 1272.298596][T27087] do_wp_page+0x89c/0x1e80 [ 1272.303004][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1272.308360][T27087] ? kernel_text_address+0x73/0xf0 [ 1272.313446][T27087] ? lock_acquire+0x1db/0x570 [ 1272.318180][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1272.323448][T27087] ? kasan_check_write+0x14/0x20 [ 1272.328378][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1272.333373][T27087] ? lock_release+0xc40/0xc40 [ 1272.338021][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1272.342947][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1272.348731][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1272.354427][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1272.359525][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1272.365060][T27087] ? check_preemption_disabled+0x48/0x290 [ 1272.370767][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1272.375698][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1272.380520][T27087] ? kasan_check_read+0x11/0x20 [ 1272.385356][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1272.391318][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1272.396924][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1272.403409][T27087] ? check_preemption_disabled+0x48/0x290 [ 1272.409113][T27087] handle_mm_fault+0x4ec/0xc80 [ 1272.413851][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1272.419199][T27087] __do_page_fault+0x5ef/0xda0 [ 1272.423963][T27087] do_page_fault+0xe6/0x7d8 [ 1272.428448][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1272.434057][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1272.438880][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1272.445019][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1272.450639][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.456852][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1272.462555][T27087] ? page_fault+0x8/0x30 [ 1272.466783][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1272.472326][T27087] ? page_fault+0x8/0x30 [ 1272.476554][T27087] page_fault+0x1e/0x30 [ 1272.480678][T27087] RIP: 0033:0x42f05a [ 1272.484553][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1272.504144][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1272.510194][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1272.518140][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1272.526092][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1272.534045][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1272.541998][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1272.550792][T27087] memory: usage 8960kB, limit 0kB, failcnt 449 [ 1272.557165][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1272.564760][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1272.564767][T27087] Memory cgroup stats for /syz4: cache:64KB rss:400KB rss_huge:0KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:240KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1272.564851][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=27087,uid=0 [ 1272.607580][T27087] Memory cgroup out of memory: Kill process 27087 (syz-executor4) score 8484000 or sacrifice child [ 1272.618640][T27087] Killed process 29938 (syz-executor4) total-vm:70400kB, anon-rss:136kB, file-rss:32768kB, shmem-rss:0kB [ 1272.639995][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1272.650241][T27087] CPU: 1 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1272.659236][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.669265][T27087] Call Trace: [ 1272.672540][T27087] dump_stack+0x1db/0x2d0 [ 1272.676841][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1272.682627][T27087] dump_header+0x1e6/0x11a6 [ 1272.687103][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1272.692705][T27087] ? print_usage_bug+0xd0/0xd0 [ 1272.697441][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1272.703062][T27087] ? ___ratelimit+0x37c/0x686 [ 1272.707715][T27087] ? mark_held_locks+0xb1/0x100 [ 1272.712541][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1272.718317][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1272.724130][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1272.729386][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1272.734400][T27087] ? kasan_check_read+0x11/0x20 [ 1272.739219][T27087] ? ___ratelimit+0x37c/0x686 [ 1272.743876][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1272.749652][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1272.754909][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1272.760599][T27087] ? lock_acquire+0x1db/0x570 [ 1272.765251][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1272.771032][T27087] ? ___ratelimit+0xac/0x686 [ 1272.775598][T27087] ? idr_get_free+0xee0/0xee0 [ 1272.780245][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1272.785515][T27087] oom_kill_process.cold+0x10/0x9ca [ 1272.790789][T27087] ? cgroup_procs_next+0x70/0x70 [ 1272.795704][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1272.800873][T27087] ? oom_badness+0xa50/0xa50 [ 1272.805439][T27087] ? oom_evaluate_task+0x540/0x540 [ 1272.810531][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1272.815894][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1272.820630][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.826849][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1272.832464][T27087] out_of_memory+0x885/0x1420 [ 1272.837113][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1272.842024][T27087] ? oom_killer_disable+0x340/0x340 [ 1272.847197][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1272.852978][T27087] ? lock_acquire+0x1db/0x570 [ 1272.857634][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1272.863154][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1272.868237][T27087] ? memory_oom_group_write+0x160/0x160 [ 1272.873757][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1272.879020][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1272.883943][T27087] try_charge+0x1407/0x1d30 [ 1272.888422][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.894640][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1272.900157][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1272.905767][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1272.911284][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1272.916975][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1272.922664][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1272.927939][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1272.933291][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1272.939509][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1272.945726][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1272.951330][T27087] wp_page_copy+0x45a/0x1c70 [ 1272.955889][T27087] ? swp_swapcount+0x540/0x540 [ 1272.960623][T27087] ? __lock_acquire+0x572/0x4a10 [ 1272.965535][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1272.969751][T27087] ? find_held_lock+0x35/0x120 [ 1272.974487][T27087] ? do_wp_page+0x894/0x1e80 [ 1272.979057][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1272.985276][T27087] ? kasan_check_read+0x11/0x20 [ 1272.990106][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1272.995194][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1273.000455][T27087] ? print_usage_bug+0xd0/0xd0 [ 1273.005195][T27087] do_wp_page+0x89c/0x1e80 [ 1273.009587][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1273.014931][T27087] ? kernel_text_address+0x73/0xf0 [ 1273.020014][T27087] ? lock_acquire+0x1db/0x570 [ 1273.024664][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1273.029925][T27087] ? kasan_check_write+0x14/0x20 [ 1273.034833][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1273.039828][T27087] ? lock_release+0xc40/0xc40 [ 1273.044477][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1273.049410][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1273.055188][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1273.060884][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1273.065976][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1273.071558][T27087] ? check_preemption_disabled+0x48/0x290 [ 1273.077258][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1273.082193][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1273.087017][T27087] ? kasan_check_read+0x11/0x20 [ 1273.091843][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1273.097801][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1273.103403][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1273.109616][T27087] ? check_preemption_disabled+0x48/0x290 [ 1273.115335][T27087] handle_mm_fault+0x4ec/0xc80 [ 1273.120083][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1273.125348][T27087] __do_page_fault+0x5ef/0xda0 [ 1273.130087][T27087] do_page_fault+0xe6/0x7d8 [ 1273.134557][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1273.140154][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1273.145069][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1273.151192][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1273.156793][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.163002][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1273.168692][T27087] ? page_fault+0x8/0x30 [ 1273.172922][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1273.178440][T27087] ? page_fault+0x8/0x30 [ 1273.182654][T27087] page_fault+0x1e/0x30 [ 1273.186784][T27087] RIP: 0033:0x42f05a [ 1273.190654][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1273.210227][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1273.216263][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1273.224203][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1273.232148][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1273.240091][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1273.248033][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1273.259068][T27087] memory: usage 8704kB, limit 0kB, failcnt 455 [ 1273.267178][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1273.274779][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1273.281700][T27087] Memory cgroup stats for /syz4: cache:64KB rss:268KB rss_huge:0KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:128KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1273.302366][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=27087,uid=0 [ 1273.302415][T27087] Memory cgroup out of memory: Kill process 27087 (syz-executor4) score 8484000 or sacrifice child [ 1273.302577][T27087] Killed process 27162 (syz-executor4) total-vm:70400kB, anon-rss:104kB, file-rss:32768kB, shmem-rss:0kB [ 1273.342623][T27087] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1273.352910][T27087] CPU: 0 PID: 27087 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1273.361910][T27087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.361915][T27087] Call Trace: [ 1273.361933][T27087] dump_stack+0x1db/0x2d0 [ 1273.361951][T27087] ? dump_stack_print_info.cold+0x20/0x20 [ 1273.361976][T27087] dump_header+0x1e6/0x11a6 [ 1273.361992][T27087] ? add_lock_to_list.isra.0+0x450/0x450 [ 1273.362008][T27087] ? print_usage_bug+0xd0/0xd0 [ 1273.362023][T27087] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1273.362035][T27087] ? ___ratelimit+0x37c/0x686 [ 1273.362053][T27087] ? mark_held_locks+0xb1/0x100 [ 1273.362069][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1273.362082][T27087] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1273.362094][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1273.362108][T27087] ? trace_hardirqs_on+0xbd/0x310 [ 1273.362122][T27087] ? kasan_check_read+0x11/0x20 [ 1273.362155][T27087] ? ___ratelimit+0x37c/0x686 [ 1273.379778][T27087] ? trace_hardirqs_off_caller+0x300/0x300 [ 1273.389940][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1273.389957][T27087] ? trace_hardirqs_on_caller+0x310/0x310 [ 1273.405910][T27087] ? lock_acquire+0x1db/0x570 [ 1273.415389][T27087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1273.415403][T27087] ? ___ratelimit+0xac/0x686 [ 1273.415418][T27087] ? idr_get_free+0xee0/0xee0 [ 1273.415431][T27087] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1273.415456][T27087] oom_kill_process.cold+0x10/0x9ca [ 1273.415481][T27087] ? cgroup_procs_next+0x70/0x70 [ 1273.415497][T27087] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1273.415514][T27087] ? oom_badness+0xa50/0xa50 [ 1273.432345][T27087] ? oom_evaluate_task+0x540/0x540 [ 1273.432362][T27087] ? mem_cgroup_iter_break+0x30/0x30 [ 1273.432379][T27087] ? mutex_trylock+0x2d0/0x2d0 [ 1273.442187][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.442212][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1273.442232][T27087] out_of_memory+0x885/0x1420 [ 1273.442249][T27087] ? mem_cgroup_iter+0x4f4/0xf50 [ 1273.442268][T27087] ? oom_killer_disable+0x340/0x340 [ 1273.442284][T27087] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1273.442297][T27087] ? lock_acquire+0x1db/0x570 [ 1273.442318][T27087] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1273.452747][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1273.463693][T27087] ? memory_oom_group_write+0x160/0x160 [ 1273.463707][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1273.463737][T27087] ? _raw_spin_unlock+0x2d/0x50 [ 1273.463755][T27087] try_charge+0x1407/0x1d30 [ 1273.463769][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.463790][T27087] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1273.474220][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1273.483548][T27087] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1273.483564][T27087] ? get_mem_cgroup_from_page+0x190/0x190 [ 1273.483583][T27087] ? rcu_read_lock_sched_held+0x110/0x130 [ 1273.483601][T27087] mem_cgroup_try_charge+0x43a/0xdb0 [ 1273.483620][T27087] ? mem_cgroup_protected+0xa10/0xa10 [ 1273.483647][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1273.483658][T27087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1273.483677][T27087] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1273.483693][T27087] wp_page_copy+0x45a/0x1c70 [ 1273.483704][T27087] ? swp_swapcount+0x540/0x540 [ 1273.483723][T27087] ? __lock_acquire+0x572/0x4a10 [ 1273.483743][T27087] ? pmd_pfn+0x1d0/0x1d0 [ 1273.483756][T27087] ? find_held_lock+0x35/0x120 [ 1273.483770][T27087] ? do_wp_page+0x894/0x1e80 [ 1273.483785][T27087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1273.483807][T27087] ? kasan_check_read+0x11/0x20 [ 1273.483821][T27087] ? do_raw_spin_unlock+0xa0/0x330 [ 1273.483835][T27087] ? do_raw_spin_trylock+0x270/0x270 [ 1273.483851][T27087] ? print_usage_bug+0xd0/0xd0 [ 1273.483870][T27087] do_wp_page+0x89c/0x1e80 [ 1273.483890][T27087] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1273.483904][T27087] ? kernel_text_address+0x73/0xf0 [ 1273.483921][T27087] ? lock_acquire+0x1db/0x570 [ 1273.483935][T27087] ? __handle_mm_fault+0x1dac/0x5610 [ 1273.483952][T27087] ? kasan_check_write+0x14/0x20 [ 1273.483966][T27087] ? do_raw_spin_lock+0x156/0x360 [ 1273.483978][T27087] ? lock_release+0xc40/0xc40 [ 1273.483994][T27087] ? rwlock_bug.part.0+0x90/0x90 [ 1273.484009][T27087] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1273.484022][T27087] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1273.484043][T27087] __handle_mm_fault+0x2d06/0x5610 [ 1273.484066][T27087] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1273.484082][T27087] ? check_preemption_disabled+0x48/0x290 [ 1273.484098][T27087] ? handle_mm_fault+0x3cc/0xc80 [ 1273.484130][T27087] ? lock_downgrade+0xbe0/0xbe0 [ 1273.494564][T27087] ? kasan_check_read+0x11/0x20 [ 1273.494583][T27087] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1273.504662][T27087] ? rcu_read_unlock_special+0x380/0x380 [ 1273.504676][T27087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1273.504692][T27087] ? check_preemption_disabled+0x48/0x290 [ 1273.504723][T27087] handle_mm_fault+0x4ec/0xc80 [ 1273.514359][T27087] ? __handle_mm_fault+0x5610/0x5610 [ 1273.514384][T27087] __do_page_fault+0x5ef/0xda0 [ 1273.514406][T27087] do_page_fault+0xe6/0x7d8 [ 1273.514422][T27087] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1273.530626][T27087] ? vmalloc_sync_all+0x30/0x30 [ 1273.540875][T27087] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1273.556767][T27087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1273.556783][T27087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.556796][T27087] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1273.556812][T27087] ? page_fault+0x8/0x30 [ 1273.572565][T27087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1273.572581][T27087] ? page_fault+0x8/0x30 [ 1273.572595][T27087] page_fault+0x1e/0x30 [ 1273.583375][T27087] RIP: 0033:0x42f05a [ 1273.583402][T27087] Code: 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 3a f7 ff ff [ 1273.583410][T27087] RSP: 002b:00007ffde3dbb500 EFLAGS: 00010206 [ 1273.583421][T27087] RAX: 0000000000018691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1273.583430][T27087] RDX: 00000000019af930 RSI: 00000000019b7970 RDI: 0000000000000003 [ 1273.583438][T27087] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000019ae940 [ 1273.583446][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1273.583463][T27087] R13: 0000000000710698 R14: 00000000000000c2 R15: 0000000000002710 [ 1273.585907][T27087] memory: usage 8464kB, limit 0kB, failcnt 461 [ 1273.599120][T27087] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1273.611046][T27087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1273.622006][T27087] Memory cgroup stats for /syz4: cache:64KB rss:268KB rss_huge:0KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:48KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1273.633104][T27087] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=27087,uid=0 [ 1273.651012][T27087] Memory cgroup out of memory: Kill process 27087 (syz-executor4) score 8484000 or sacrifice child [ 1273.666042][T27087] Killed process 27087 (syz-executor4) total-vm:70268kB, anon-rss:92kB, file-rss:33728kB, shmem-rss:0kB [ 1273.675884][ T1042] oom_reaper: reaped process 27087 (syz-executor4), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB [ 1274.053651][T21274] device bridge_slave_1 left promiscuous mode [ 1274.059820][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.112470][T21274] device bridge_slave_0 left promiscuous mode [ 1274.118616][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.364368][T21274] device hsr_slave_1 left promiscuous mode [ 1274.406141][T21274] device hsr_slave_0 left promiscuous mode [ 1274.465710][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1274.478376][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1274.489470][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1274.536950][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1274.627702][T21274] bond0 (unregistering): Released all slaves 13:43:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@dots='dots'}, {@nodots='nodots'}]}) 13:43:39 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:39 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, r1) 13:43:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='memory.max\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='e', 0x1}], 0x1) 13:43:39 executing program 5: clone(0x13102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:43:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1274.898624][T31403] FAT-fs (loop2): bogus number of reserved sectors [ 1274.912532][T31403] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:39 executing program 5: memfd_create(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, 0x0, 0x0) [ 1274.996977][T31411] FAT-fs (loop2): bogus number of reserved sectors [ 1275.010654][T31411] FAT-fs (loop2): Can't find a valid FAT filesystem 13:43:39 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:39 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:39 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb44393ae5f3fa533acef1f26301abd3d0fdf80fe8018bbf20ac0", 0x57}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:39 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1275.158520][T31432] IPVS: ftp: loaded support on port[0] = 21 13:43:39 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:39 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:39 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:40 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1275.589727][T31432] chnl_net:caif_netlink_parms(): no params data found [ 1275.715760][T31432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.763138][T31432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.806177][T31432] device bridge_slave_0 entered promiscuous mode [ 1275.829257][T31432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.848693][T31432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.867526][T31432] device bridge_slave_1 entered promiscuous mode [ 1275.923100][T31432] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1275.949201][T31432] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1276.196716][T31432] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1276.204887][T31432] team0: Port device team_slave_0 added [ 1276.211129][T31432] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1276.219186][T31432] team0: Port device team_slave_1 added [ 1276.225229][T31432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1276.233385][T31432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1276.311426][T31432] device hsr_slave_0 entered promiscuous mode [ 1276.381841][T31432] device hsr_slave_1 entered promiscuous mode [ 1276.442870][T31432] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1276.450541][T31432] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1276.485942][T31432] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1276.548904][T31432] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1276.559164][T31432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.576905][T31432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1276.590681][T31432] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1276.602159][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1276.621616][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1276.629272][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1276.646960][T31432] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1276.658736][T31432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.675521][T31432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1276.691378][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1276.700617][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1276.709111][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.716192][ T7577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.731870][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1276.754772][T31432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1276.771702][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1276.780586][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1276.798777][T28144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.805863][T28144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.833332][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1276.852556][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1276.860897][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1276.882383][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1276.892227][T31432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1276.900863][T31432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1276.912865][T31432] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1276.919592][T31432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1276.927770][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1276.936593][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1276.954709][T31432] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1276.967369][T31432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.052811][T31477] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1277.071614][T31477] CPU: 1 PID: 31477 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1277.080641][T31477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.090685][T31477] Call Trace: [ 1277.093981][T31477] dump_stack+0x1db/0x2d0 [ 1277.098316][T31477] ? dump_stack_print_info.cold+0x20/0x20 [ 1277.104045][T31477] dump_header+0x1e6/0x11a6 [ 1277.108545][T31477] ? add_lock_to_list.isra.0+0x450/0x450 [ 1277.114173][T31477] ? print_usage_bug+0xd0/0xd0 [ 1277.118949][T31477] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1277.124580][T31477] ? ___ratelimit+0x37c/0x686 [ 1277.129256][T31477] ? mark_held_locks+0xb1/0x100 [ 1277.134100][T31477] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1277.139895][T31477] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1277.145688][T31477] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1277.150975][T31477] ? trace_hardirqs_on+0xbd/0x310 [ 1277.156009][T31477] ? kasan_check_read+0x11/0x20 [ 1277.160853][T31477] ? ___ratelimit+0x37c/0x686 [ 1277.165525][T31477] ? trace_hardirqs_off_caller+0x300/0x300 [ 1277.171337][T31477] ? do_raw_spin_trylock+0x270/0x270 [ 1277.176614][T31477] ? trace_hardirqs_on_caller+0x310/0x310 [ 1277.182324][T31477] ? lock_acquire+0x1db/0x570 [ 1277.187016][T31477] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1277.192814][T31477] ? ___ratelimit+0xac/0x686 [ 1277.197400][T31477] ? idr_get_free+0xee0/0xee0 [ 1277.202077][T31477] oom_kill_process.cold+0x10/0x9ca [ 1277.207268][T31477] ? ___preempt_schedule+0x16/0x18 [ 1277.212374][T31477] ? cgroup_procs_next+0x70/0x70 [ 1277.217310][T31477] ? _raw_spin_unlock_irq+0x74/0x90 [ 1277.222507][T31477] ? oom_badness+0xa50/0xa50 [ 1277.227094][T31477] ? oom_evaluate_task+0x540/0x540 [ 1277.232206][T31477] ? mem_cgroup_iter_break+0x30/0x30 [ 1277.237486][T31477] ? mutex_trylock+0x2d0/0x2d0 [ 1277.242255][T31477] ? cgroup_file_notify+0x217/0x2e0 [ 1277.247464][T31477] out_of_memory+0x885/0x1420 [ 1277.252130][T31477] ? mark_held_locks+0xb1/0x100 [ 1277.256981][T31477] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1277.262792][T31477] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1277.268590][T31477] ? oom_killer_disable+0x340/0x340 [ 1277.273788][T31477] ? preempt_schedule+0x4b/0x60 [ 1277.278633][T31477] ? ___preempt_schedule+0x16/0x18 [ 1277.283744][T31477] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1277.289283][T31477] ? memory_oom_group_write+0x160/0x160 [ 1277.294830][T31477] memory_max_write+0x1b0/0x3e0 [ 1277.299668][T31477] ? lock_acquire+0x1db/0x570 [ 1277.304345][T31477] ? mem_cgroup_write+0x440/0x440 [ 1277.309364][T31477] ? lock_release+0xc40/0xc40 [ 1277.314030][T31477] ? add_lock_to_list.isra.0+0x450/0x450 [ 1277.319665][T31477] ? lock_downgrade+0xbe0/0xbe0 [ 1277.324519][T31477] cgroup_file_write+0x252/0x830 [ 1277.329471][T31477] ? mem_cgroup_write+0x440/0x440 [ 1277.334505][T31477] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1277.340139][T31477] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1277.345768][T31477] kernfs_fop_write+0x2ba/0x480 [ 1277.350617][T31477] do_iter_write+0x4a5/0x610 [ 1277.355230][T31477] vfs_writev+0x1ee/0x370 [ 1277.359553][T31477] ? vfs_iter_write+0xb0/0xb0 [ 1277.364235][T31477] ? trace_hardirqs_off_caller+0x300/0x300 [ 1277.370042][T31477] ? mutex_lock_nested+0x16/0x20 [ 1277.374972][T31477] ? mutex_lock_nested+0x16/0x20 [ 1277.379988][T31477] ? __fdget_pos+0xdc/0x1f0 [ 1277.384482][T31477] ? __fdget_raw+0x20/0x20 [ 1277.388890][T31477] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1277.395130][T31477] ? put_timespec64+0x115/0x1b0 [ 1277.399976][T31477] do_writev+0x11a/0x300 [ 1277.404229][T31477] ? vfs_writev+0x370/0x370 [ 1277.408752][T31477] ? trace_hardirqs_off_caller+0x300/0x300 [ 1277.414551][T31477] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1277.420006][T31477] __x64_sys_writev+0x75/0xb0 [ 1277.424687][T31477] do_syscall_64+0x1a3/0x800 [ 1277.429279][T31477] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1277.434905][T31477] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1277.440621][T31477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1277.446168][T31477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1277.452064][T31477] RIP: 0033:0x457ec9 [ 1277.455966][T31477] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1277.475556][T31477] RSP: 002b:00007f769392dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1277.484026][T31477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 1277.491970][T31477] RDX: 0000000000000001 RSI: 0000000020000700 RDI: 0000000000000004 [ 1277.499908][T31477] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1277.507852][T31477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f769392e6d4 [ 1277.515797][T31477] R13: 00000000004c488e R14: 00000000004dca78 R15: 00000000ffffffff [ 1277.529191][T31477] memory: usage 10096kB, limit 0kB, failcnt 462 [ 1277.535494][T31477] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1277.544119][T31477] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1277.550965][T31477] Memory cgroup stats for /syz4: cache:64KB rss:2116KB rss_huge:2048KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1277.572527][T31477] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=31476,uid=0 [ 1277.588848][T31477] Memory cgroup out of memory: Kill process 31476 (syz-executor4) score 8758000 or sacrifice child 13:43:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='memory.max\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='e', 0x1}], 0x1) 13:43:42 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:42 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:42 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:42 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1277.599622][T31477] Killed process 31476 (syz-executor4) total-vm:70404kB, anon-rss:2136kB, file-rss:32768kB, shmem-rss:0kB [ 1277.612200][ T1042] oom_reaper: reaped process 31476 (syz-executor4), now anon-rss:0kB, file-rss:32800kB, shmem-rss:0kB [ 1277.673849][T31432] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1277.692300][T31432] CPU: 0 PID: 31432 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1277.701326][T31432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.701332][T31432] Call Trace: [ 1277.701360][T31432] dump_stack+0x1db/0x2d0 [ 1277.719080][T31432] ? dump_stack_print_info.cold+0x20/0x20 [ 1277.719108][T31432] dump_header+0x1e6/0x11a6 [ 1277.719130][T31432] ? add_lock_to_list.isra.0+0x450/0x450 [ 1277.729317][T31432] ? print_usage_bug+0xd0/0xd0 [ 1277.729342][T31432] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1277.739687][T31432] ? ___ratelimit+0x37c/0x686 [ 1277.749952][T31432] ? mark_held_locks+0xb1/0x100 [ 1277.754794][T31432] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1277.754810][T31432] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1277.754829][T31432] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1277.771737][T31432] ? trace_hardirqs_on+0xbd/0x310 [ 1277.771753][T31432] ? kasan_check_read+0x11/0x20 [ 1277.771765][T31432] ? ___ratelimit+0x37c/0x686 [ 1277.771780][T31432] ? trace_hardirqs_off_caller+0x300/0x300 [ 1277.771794][T31432] ? do_raw_spin_trylock+0x270/0x270 [ 1277.771808][T31432] ? trace_hardirqs_on_caller+0x310/0x310 [ 1277.771821][T31432] ? lock_acquire+0x1db/0x570 [ 1277.771843][T31432] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1277.771857][T31432] ? ___ratelimit+0xac/0x686 [ 1277.771872][T31432] ? idr_get_free+0xee0/0xee0 [ 1277.771886][T31432] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1277.771909][T31432] oom_kill_process.cold+0x10/0x9ca [ 1277.771927][T31432] ? cgroup_procs_next+0x70/0x70 [ 1277.771951][T31432] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1277.781780][T31432] ? oom_badness+0xa50/0xa50 [ 1277.781799][T31432] ? oom_evaluate_task+0x540/0x540 [ 1277.781814][T31432] ? mem_cgroup_iter_break+0x30/0x30 [ 1277.781826][T31432] ? mutex_trylock+0x2d0/0x2d0 [ 1277.781846][T31432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1277.803242][T31432] ? rcu_read_unlock_special+0x380/0x380 [ 1277.803265][T31432] out_of_memory+0x885/0x1420 [ 1277.803282][T31432] ? mem_cgroup_iter+0x4f4/0xf50 [ 1277.803301][T31432] ? oom_killer_disable+0x340/0x340 [ 1277.803318][T31432] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1277.803333][T31432] ? lock_acquire+0x1db/0x570 [ 1277.803360][T31432] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1277.813802][T31432] ? do_raw_spin_unlock+0xa0/0x330 [ 1277.813819][T31432] ? memory_oom_group_write+0x160/0x160 [ 1277.813831][T31432] ? do_raw_spin_trylock+0x270/0x270 [ 1277.813854][T31432] ? _raw_spin_unlock+0x2d/0x50 [ 1277.813871][T31432] try_charge+0x1407/0x1d30 [ 1277.813886][T31432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1277.813905][T31432] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1277.813921][T31432] ? rcu_read_unlock_special+0x380/0x380 [ 1277.813943][T31432] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1277.813976][T31432] ? get_mem_cgroup_from_page+0x190/0x190 [ 1277.813997][T31432] ? rcu_read_lock_sched_held+0x110/0x130 [ 1277.814015][T31432] mem_cgroup_try_charge+0x43a/0xdb0 [ 1277.814037][T31432] ? mem_cgroup_protected+0xa10/0xa10 [ 1277.975791][T31432] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1277.982008][T31432] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1277.988230][T31432] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1277.993845][T31432] wp_page_copy+0x45a/0x1c70 [ 1277.998415][T31432] ? swp_swapcount+0x540/0x540 [ 1278.003163][T31432] ? __lock_acquire+0x572/0x4a10 [ 1278.008078][T31432] ? pmd_pfn+0x1d0/0x1d0 [ 1278.012298][T31432] ? find_held_lock+0x35/0x120 [ 1278.017055][T31432] ? do_wp_page+0x894/0x1e80 [ 1278.021621][T31432] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1278.027844][T31432] ? kasan_check_read+0x11/0x20 [ 1278.032682][T31432] ? do_raw_spin_unlock+0xa0/0x330 [ 1278.037772][T31432] ? do_raw_spin_trylock+0x270/0x270 [ 1278.043030][T31432] ? print_usage_bug+0xd0/0xd0 [ 1278.047772][T31432] do_wp_page+0x89c/0x1e80 [ 1278.052175][T31432] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1278.057532][T31432] ? kernel_text_address+0x73/0xf0 [ 1278.062622][T31432] ? lock_acquire+0x1db/0x570 [ 1278.067281][T31432] ? __handle_mm_fault+0x1dac/0x5610 [ 1278.072546][T31432] ? kasan_check_write+0x14/0x20 [ 1278.077457][T31432] ? do_raw_spin_lock+0x156/0x360 [ 1278.082453][T31432] ? lock_release+0xc40/0xc40 [ 1278.087107][T31432] ? rwlock_bug.part.0+0x90/0x90 [ 1278.092028][T31432] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1278.097810][T31432] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1278.103509][T31432] __handle_mm_fault+0x2d06/0x5610 [ 1278.108601][T31432] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1278.114122][T31432] ? check_preemption_disabled+0x48/0x290 [ 1278.119833][T31432] ? handle_mm_fault+0x3cc/0xc80 [ 1278.124759][T31432] ? lock_downgrade+0xbe0/0xbe0 [ 1278.129582][T31432] ? kasan_check_read+0x11/0x20 [ 1278.134410][T31432] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1278.140369][T31432] ? rcu_read_unlock_special+0x380/0x380 [ 1278.145980][T31432] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1278.152200][T31432] ? check_preemption_disabled+0x48/0x290 [ 1278.157903][T31432] handle_mm_fault+0x4ec/0xc80 [ 1278.162646][T31432] ? __handle_mm_fault+0x5610/0x5610 [ 1278.167913][T31432] __do_page_fault+0x5ef/0xda0 [ 1278.172659][T31432] do_page_fault+0xe6/0x7d8 [ 1278.177147][T31432] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1278.182778][T31432] ? vmalloc_sync_all+0x30/0x30 [ 1278.187605][T31432] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1278.193732][T31432] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1278.199338][T31432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1278.205552][T31432] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1278.211252][T31432] ? page_fault+0x8/0x30 [ 1278.215473][T31432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1278.220993][T31432] ? page_fault+0x8/0x30 [ 1278.225214][T31432] page_fault+0x1e/0x30 [ 1278.229345][T31432] RIP: 0033:0x42f056 [ 1278.233216][T31432] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 [ 1278.252811][T31432] RSP: 002b:00007ffc0a064f80 EFLAGS: 00010206 [ 1278.258863][T31432] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1278.266811][T31432] RDX: 00000000024f4930 RSI: 00000000024fc970 RDI: 0000000000000003 [ 1278.274766][T31432] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000024f3940 [ 1278.282711][T31432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1278.290655][T31432] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 1278.333993][T31432] memory: usage 7776kB, limit 0kB, failcnt 470 [ 1278.340286][T31432] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1278.353788][T31432] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1278.376897][T31432] Memory cgroup stats for /syz4: cache:64KB rss:12KB rss_huge:0KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1278.398315][T31432] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=31432,uid=0 [ 1278.414072][T31432] Memory cgroup out of memory: Kill process 31432 (syz-executor4) score 8243000 or sacrifice child 13:43:42 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1278.445718][T31432] Killed process 31432 (syz-executor4) total-vm:70272kB, anon-rss:68kB, file-rss:32784kB, shmem-rss:0kB [ 1278.466752][ T1042] oom_reaper: reaped process 31432 (syz-executor4), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB 13:43:43 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:43 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:43 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:43 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1279.182414][T21274] device bridge_slave_1 left promiscuous mode [ 1279.188700][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.242837][T21274] device bridge_slave_0 left promiscuous mode [ 1279.248998][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.312784][T21274] device bridge_slave_1 left promiscuous mode [ 1279.318928][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.362632][T21274] device bridge_slave_0 left promiscuous mode [ 1279.368788][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.523483][T21274] device hsr_slave_1 left promiscuous mode [ 1279.585171][T21274] device hsr_slave_0 left promiscuous mode [ 1279.646548][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1279.659926][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1279.670975][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1279.698104][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1279.789090][T21274] bond0 (unregistering): Released all slaves [ 1279.964844][T21274] device hsr_slave_1 left promiscuous mode [ 1280.007043][T21274] device hsr_slave_0 left promiscuous mode [ 1280.067771][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1280.079633][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1280.091097][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1280.148170][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1280.223817][T21274] bond0 (unregistering): Released all slaves [ 1282.482117][T21274] device bridge_slave_1 left promiscuous mode [ 1282.488274][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.542313][T21274] device bridge_slave_0 left promiscuous mode [ 1282.548459][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.684511][T21274] device hsr_slave_1 left promiscuous mode [ 1282.745060][T21274] device hsr_slave_0 left promiscuous mode [ 1282.796917][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1282.808478][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1282.819538][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1282.885715][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1282.967713][T21274] bond0 (unregistering): Released all slaves 13:43:50 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='memory.max\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='e', 0x1}], 0x1) 13:43:50 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:50 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:50 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:50 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:50 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:51 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:51 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1286.619747][T31540] IPVS: ftp: loaded support on port[0] = 21 [ 1286.623818][T31546] IPVS: ftp: loaded support on port[0] = 21 13:43:51 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:51 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1286.872600][T31546] chnl_net:caif_netlink_parms(): no params data found 13:43:51 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1286.997625][T31546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.004963][T31546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.020050][T31546] device bridge_slave_0 entered promiscuous mode [ 1287.040653][T31546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.049311][T31546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.057452][T31546] device bridge_slave_1 entered promiscuous mode [ 1287.076582][T31540] chnl_net:caif_netlink_parms(): no params data found [ 1287.116213][T31546] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1287.135150][T31546] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1287.173333][T31546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1287.192028][T31546] team0: Port device team_slave_0 added [ 1287.197947][T31540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.205240][T31540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.214296][T31540] device bridge_slave_0 entered promiscuous mode [ 1287.222295][T31546] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1287.230194][T31546] team0: Port device team_slave_1 added [ 1287.236433][T31546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1287.244485][T31540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.252083][T31540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.259826][T31540] device bridge_slave_1 entered promiscuous mode [ 1287.267499][T31546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1287.299951][T31540] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1287.345138][T31546] device hsr_slave_0 entered promiscuous mode [ 1287.381824][T31546] device hsr_slave_1 entered promiscuous mode [ 1287.412414][T31546] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1287.420870][T31540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1287.451369][T31546] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1287.466319][T31540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1287.474423][T31540] team0: Port device team_slave_0 added [ 1287.480808][T31540] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1287.493628][T31540] team0: Port device team_slave_1 added [ 1287.499680][T31540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1287.511083][T31540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1287.564732][T31540] device hsr_slave_0 entered promiscuous mode [ 1287.602835][T31540] device hsr_slave_1 entered promiscuous mode [ 1287.652371][T31540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1287.661285][T31540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1287.672063][T31546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.679102][T31546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.686398][T31546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.693501][T31546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.718073][T31540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.725155][T31540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.732560][T31540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.739595][T31540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.785178][T31546] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1287.792233][T31546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.805984][T31546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1287.817843][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1287.825935][T28144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.833896][T28144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.842463][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1287.850929][T28144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.859139][T28144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.873994][T31546] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1287.880750][T31546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.894782][T31540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.904305][T31540] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1287.912785][T31546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1287.921657][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1287.930160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1287.938702][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.945774][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.955541][T31546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1287.966867][T31540] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1287.974378][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1287.983254][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1287.991448][T28144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.998517][T28144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.006503][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1288.014226][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1288.024079][T31546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1288.032994][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1288.048183][T31546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1288.055812][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1288.067525][T31546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1288.076381][T31540] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1288.083602][T31540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.090588][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1288.099575][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1288.108278][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1288.118285][T31546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1288.130001][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1288.138672][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1288.148864][T31540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1288.157623][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1288.166255][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1288.174784][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.181882][ T7577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.191691][T31540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1288.202625][T31540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1288.211268][T31546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1288.220327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1288.228918][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1288.237513][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.244595][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.252127][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1288.260479][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1288.269012][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1288.279810][T31540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1288.290279][T31546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1288.298092][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1288.307086][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1288.315448][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1288.326103][T31540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1288.335521][T31546] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1288.342645][T31546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1288.350443][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1288.359185][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1288.370800][T31540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1288.379621][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1288.387532][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1288.396343][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1288.409547][T31546] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1288.420753][T31540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1288.428638][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1288.437027][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1288.448916][T31546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.460729][T31540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1288.468631][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1288.476889][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1288.490999][T31540] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1288.511412][T31540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1288.530441][T31540] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1288.538542][T31577] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1288.544152][T31540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.554946][T31577] CPU: 0 PID: 31577 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1288.564648][T31577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.564654][T31577] Call Trace: [ 1288.564675][T31577] dump_stack+0x1db/0x2d0 [ 1288.564698][T31577] ? dump_stack_print_info.cold+0x20/0x20 [ 1288.564733][T31577] dump_header+0x1e6/0x11a6 [ 1288.592528][T31577] ? add_lock_to_list.isra.0+0x450/0x450 [ 1288.598168][T31577] ? print_usage_bug+0xd0/0xd0 [ 1288.602941][T31577] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1288.608568][T31577] ? ___ratelimit+0x37c/0x686 [ 1288.613238][T31577] ? mark_held_locks+0xb1/0x100 [ 1288.618077][T31577] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1288.623867][T31577] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1288.629659][T31577] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1288.634926][T31577] ? trace_hardirqs_on+0xbd/0x310 [ 1288.639932][T31577] ? kasan_check_read+0x11/0x20 [ 1288.644761][T31577] ? ___ratelimit+0x37c/0x686 [ 1288.649423][T31577] ? trace_hardirqs_off_caller+0x300/0x300 [ 1288.655208][T31577] ? do_raw_spin_trylock+0x270/0x270 [ 1288.660474][T31577] ? trace_hardirqs_on_caller+0x310/0x310 [ 1288.666190][T31577] ? lock_acquire+0x1db/0x570 [ 1288.670852][T31577] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1288.676642][T31577] ? ___ratelimit+0xac/0x686 [ 1288.681212][T31577] ? idr_get_free+0xee0/0xee0 [ 1288.685873][T31577] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1288.691147][T31577] oom_kill_process.cold+0x10/0x9ca [ 1288.696330][T31577] ? cgroup_procs_next+0x70/0x70 [ 1288.701252][T31577] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1288.706435][T31577] ? oom_badness+0xa50/0xa50 [ 1288.711012][T31577] ? oom_evaluate_task+0x540/0x540 [ 1288.716106][T31577] ? mem_cgroup_iter_break+0x30/0x30 [ 1288.721377][T31577] ? mutex_trylock+0x2d0/0x2d0 [ 1288.726138][T31577] ? cgroup_file_notify+0x217/0x2e0 [ 1288.731322][T31577] out_of_memory+0x885/0x1420 [ 1288.735977][T31577] ? mark_held_locks+0xb1/0x100 [ 1288.740813][T31577] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1288.746600][T31577] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1288.752404][T31577] ? oom_killer_disable+0x340/0x340 [ 1288.757672][T31577] ? preempt_schedule+0x4b/0x60 [ 1288.762506][T31577] ? ___preempt_schedule+0x16/0x18 [ 1288.767606][T31577] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1288.773140][T31577] ? memory_oom_group_write+0x160/0x160 [ 1288.778692][T31577] memory_max_write+0x1b0/0x3e0 [ 1288.783524][T31577] ? lock_acquire+0x1db/0x570 [ 1288.788189][T31577] ? mem_cgroup_write+0x440/0x440 [ 1288.793196][T31577] ? lock_release+0xc40/0xc40 [ 1288.797855][T31577] ? add_lock_to_list.isra.0+0x450/0x450 [ 1288.803481][T31577] ? lock_downgrade+0xbe0/0xbe0 [ 1288.808318][T31577] cgroup_file_write+0x252/0x830 [ 1288.813247][T31577] ? mem_cgroup_write+0x440/0x440 [ 1288.818774][T31577] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1288.824480][T31577] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1288.830091][T31577] kernfs_fop_write+0x2ba/0x480 [ 1288.834946][T31577] do_iter_write+0x4a5/0x610 [ 1288.839526][T31577] vfs_writev+0x1ee/0x370 [ 1288.843840][T31577] ? vfs_iter_write+0xb0/0xb0 [ 1288.848501][T31577] ? trace_hardirqs_off_caller+0x300/0x300 [ 1288.854293][T31577] ? mutex_lock_nested+0x16/0x20 [ 1288.859212][T31577] ? mutex_lock_nested+0x16/0x20 [ 1288.864131][T31577] ? __fdget_pos+0xdc/0x1f0 [ 1288.868619][T31577] ? __fdget_raw+0x20/0x20 [ 1288.873019][T31577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1288.879248][T31577] ? put_timespec64+0x115/0x1b0 [ 1288.884080][T31577] do_writev+0x11a/0x300 [ 1288.888306][T31577] ? vfs_writev+0x370/0x370 [ 1288.892794][T31577] ? trace_hardirqs_off_caller+0x300/0x300 [ 1288.898580][T31577] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1288.904023][T31577] __x64_sys_writev+0x75/0xb0 [ 1288.908678][T31577] do_syscall_64+0x1a3/0x800 [ 1288.913250][T31577] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1288.918865][T31577] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1288.924572][T31577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1288.930106][T31577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1288.935980][T31577] RIP: 0033:0x457ec9 [ 1288.939856][T31577] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1288.959435][T31577] RSP: 002b:00007fd26285ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1288.967823][T31577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 1288.975772][T31577] RDX: 0000000000000001 RSI: 0000000020000700 RDI: 0000000000000004 [ 1288.983721][T31577] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:43:53 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1288.991672][T31577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd26285f6d4 [ 1288.999626][T31577] R13: 00000000004c488e R14: 00000000004dca78 R15: 00000000ffffffff [ 1289.029560][T31577] memory: usage 8868kB, limit 0kB, failcnt 471 [ 1289.042733][T31577] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1289.050265][T31577] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1289.067101][T31577] Memory cgroup stats for /syz4: cache:64KB rss:2108KB rss_huge:2048KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1289.096998][T31577] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=31576,uid=0 [ 1289.118673][T31577] Memory cgroup out of memory: Kill process 31576 (syz-executor4) score 8757000 or sacrifice child 13:43:53 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:53 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:53 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:53 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:53 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:53 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1289.138968][T31577] Killed process 31576 (syz-executor4) total-vm:70404kB, anon-rss:2136kB, file-rss:32768kB, shmem-rss:0kB [ 1289.152510][ T1042] oom_reaper: reaped process 31576 (syz-executor4), now anon-rss:0kB, file-rss:32800kB, shmem-rss:0kB [ 1289.185731][T31546] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1289.206607][T31546] CPU: 0 PID: 31546 Comm: syz-executor4 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1289.215629][T31546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.225674][T31546] Call Trace: [ 1289.228960][T31546] dump_stack+0x1db/0x2d0 [ 1289.233294][T31546] ? dump_stack_print_info.cold+0x20/0x20 [ 1289.239027][T31546] dump_header+0x1e6/0x11a6 [ 1289.239045][T31546] ? add_lock_to_list.isra.0+0x450/0x450 [ 1289.239061][T31546] ? print_usage_bug+0xd0/0xd0 [ 1289.239084][T31546] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1289.253929][T31546] ? ___ratelimit+0x37c/0x686 [ 1289.253950][T31546] ? mark_held_locks+0xb1/0x100 [ 1289.253970][T31546] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1289.274844][T31546] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1289.274859][T31546] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1289.274875][T31546] ? trace_hardirqs_on+0xbd/0x310 [ 1289.274890][T31546] ? kasan_check_read+0x11/0x20 [ 1289.274903][T31546] ? ___ratelimit+0x37c/0x686 [ 1289.274918][T31546] ? trace_hardirqs_off_caller+0x300/0x300 13:43:53 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1289.274932][T31546] ? do_raw_spin_trylock+0x270/0x270 [ 1289.274947][T31546] ? trace_hardirqs_on_caller+0x310/0x310 [ 1289.274959][T31546] ? lock_acquire+0x1db/0x570 [ 1289.274979][T31546] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1289.274996][T31546] ? ___ratelimit+0xac/0x686 [ 1289.300533][T31546] ? idr_get_free+0xee0/0xee0 [ 1289.300548][T31546] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1289.300573][T31546] oom_kill_process.cold+0x10/0x9ca [ 1289.311695][T31546] ? cgroup_procs_next+0x70/0x70 13:43:53 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1289.311713][T31546] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1289.311727][T31546] ? oom_badness+0xa50/0xa50 [ 1289.311743][T31546] ? oom_evaluate_task+0x540/0x540 [ 1289.311757][T31546] ? mem_cgroup_iter_break+0x30/0x30 [ 1289.311768][T31546] ? mutex_trylock+0x2d0/0x2d0 [ 1289.311781][T31546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1289.311804][T31546] ? rcu_read_unlock_special+0x380/0x380 [ 1289.311824][T31546] out_of_memory+0x885/0x1420 [ 1289.311839][T31546] ? mem_cgroup_iter+0x4f4/0xf50 13:43:53 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1289.311856][T31546] ? oom_killer_disable+0x340/0x340 [ 1289.311871][T31546] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1289.311884][T31546] ? lock_acquire+0x1db/0x570 [ 1289.311923][T31546] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1289.311936][T31546] ? do_raw_spin_unlock+0xa0/0x330 [ 1289.311950][T31546] ? memory_oom_group_write+0x160/0x160 [ 1289.311963][T31546] ? do_raw_spin_trylock+0x270/0x270 [ 1289.311985][T31546] ? _raw_spin_unlock+0x2d/0x50 [ 1289.312001][T31546] try_charge+0x1407/0x1d30 [ 1289.312015][T31546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1289.312035][T31546] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1289.312051][T31546] ? rcu_read_unlock_special+0x380/0x380 [ 1289.312073][T31546] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1289.312089][T31546] ? get_mem_cgroup_from_page+0x190/0x190 [ 1289.312108][T31546] ? rcu_read_lock_sched_held+0x110/0x130 [ 1289.312125][T31546] mem_cgroup_try_charge+0x43a/0xdb0 [ 1289.312144][T31546] ? mem_cgroup_protected+0xa10/0xa10 [ 1289.312172][T31546] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1289.312184][T31546] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1289.312202][T31546] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1289.312219][T31546] wp_page_copy+0x45a/0x1c70 [ 1289.312230][T31546] ? swp_swapcount+0x540/0x540 [ 1289.312243][T31546] ? __lock_acquire+0x572/0x4a10 [ 1289.312262][T31546] ? pmd_pfn+0x1d0/0x1d0 [ 1289.312275][T31546] ? find_held_lock+0x35/0x120 [ 1289.312288][T31546] ? do_wp_page+0x894/0x1e80 [ 1289.312303][T31546] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1289.312331][T31546] ? kasan_check_read+0x11/0x20 [ 1289.312344][T31546] ? do_raw_spin_unlock+0xa0/0x330 [ 1289.312359][T31546] ? do_raw_spin_trylock+0x270/0x270 [ 1289.312375][T31546] ? print_usage_bug+0xd0/0xd0 [ 1289.312394][T31546] do_wp_page+0x89c/0x1e80 [ 1289.312413][T31546] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1289.312443][T31546] ? kernel_text_address+0x73/0xf0 [ 1289.312461][T31546] ? lock_acquire+0x1db/0x570 [ 1289.312475][T31546] ? __handle_mm_fault+0x1dac/0x5610 [ 1289.312493][T31546] ? kasan_check_write+0x14/0x20 [ 1289.312507][T31546] ? do_raw_spin_lock+0x156/0x360 [ 1289.312519][T31546] ? lock_release+0xc40/0xc40 [ 1289.312535][T31546] ? rwlock_bug.part.0+0x90/0x90 [ 1289.312551][T31546] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1289.312564][T31546] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1289.312594][T31546] __handle_mm_fault+0x2d06/0x5610 [ 1289.312619][T31546] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1289.312636][T31546] ? check_preemption_disabled+0x48/0x290 [ 1289.312653][T31546] ? handle_mm_fault+0x3cc/0xc80 [ 1289.312682][T31546] ? lock_downgrade+0xbe0/0xbe0 [ 1289.312695][T31546] ? kasan_check_read+0x11/0x20 [ 1289.312709][T31546] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1289.312727][T31546] ? rcu_read_unlock_special+0x380/0x380 [ 1289.312741][T31546] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1289.312756][T31546] ? check_preemption_disabled+0x48/0x290 [ 1289.312777][T31546] handle_mm_fault+0x4ec/0xc80 [ 1289.312796][T31546] ? __handle_mm_fault+0x5610/0x5610 [ 1289.312808][T31546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1289.312821][T31546] ? vmacache_update+0x114/0x140 13:43:54 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1289.312845][T31546] __do_page_fault+0x5ef/0xda0 [ 1289.312870][T31546] do_page_fault+0xe6/0x7d8 [ 1289.312882][T31546] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1289.312900][T31546] ? vmalloc_sync_all+0x30/0x30 [ 1289.312913][T31546] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1289.312929][T31546] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1289.312943][T31546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1289.312957][T31546] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1289.312970][T31546] ? page_fault+0x8/0x30 [ 1289.312987][T31546] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1289.313003][T31546] ? page_fault+0x8/0x30 [ 1289.313017][T31546] page_fault+0x1e/0x30 [ 1289.313028][T31546] RIP: 0033:0x42f056 [ 1289.313042][T31546] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 5f 62 00 85 c0 0f 84 [ 1289.313049][T31546] RSP: 002b:00007ffef862f640 EFLAGS: 00010206 [ 1289.313060][T31546] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 1289.313068][T31546] RDX: 0000000001fa7930 RSI: 0000000001faf970 RDI: 0000000000000003 [ 1289.313077][T31546] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001fa6940 [ 1289.313085][T31546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1289.313093][T31546] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 1289.651907][T31546] memory: usage 6552kB, limit 0kB, failcnt 479 [ 1289.688351][T31546] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1289.724554][T31546] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1289.747141][T31546] Memory cgroup stats for /syz4: cache:64KB rss:52KB rss_huge:0KB shmem:60KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1289.747210][T31546] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=31546,uid=0 [ 1289.747251][T31546] Memory cgroup out of memory: Kill process 31546 (syz-executor4) score 8243000 or sacrifice child [ 1289.747305][T31546] Killed process 31546 (syz-executor4) total-vm:70272kB, anon-rss:72kB, file-rss:32784kB, shmem-rss:0kB [ 1289.748064][ T1042] oom_reaper: reaped process 31546 (syz-executor4), now anon-rss:0kB, file-rss:31888kB, shmem-rss:0kB 13:43:54 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:54 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) kexec_load(0x695, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="efca36cd014015677d08347d05b653d07ba63b9cc025fdbc7997635fe1c17c6c346ecd01ae8ae849044dfb26d935574206fb7bc405247ae4e59fbb36bd1b55e6d221a7cd3bca63844c1d9955312916809e5ef474691d2d8b023d5ec29fd78977edc59a1e465ad6ea2de7fa1ef253b6ebbc8afab6b72532854212c362364ac91b50cf485791bab1abd2be636b3d2b92fc0144398c79c1b4f1ab21d75bd1a5578778381abc0a66d19d81623ab1fc8bc85431b0f3a7fd439f6bc97b3227ee0abd37dc4f4db21a0f368cfb925f", 0xcb, 0xffffffffffffffff, 0x5e}], 0x280000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:54 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:54 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:55 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:55 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1290.593937][T21274] device bridge_slave_1 left promiscuous mode [ 1290.627499][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.730982][T21274] device bridge_slave_0 left promiscuous mode [ 1290.740252][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.956708][T21274] device hsr_slave_1 left promiscuous mode [ 1291.016755][T21274] device hsr_slave_0 left promiscuous mode [ 1291.076768][T21274] team0 (unregistering): Port device team_slave_1 removed [ 1291.090016][T21274] team0 (unregistering): Port device team_slave_0 removed [ 1291.106933][T21274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1291.138116][T21274] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1291.223814][T21274] bond0 (unregistering): Released all slaves [ 1291.320347][T31673] IPVS: ftp: loaded support on port[0] = 21 [ 1291.413194][T31673] chnl_net:caif_netlink_parms(): no params data found [ 1291.497330][T31673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.504598][T31673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.512669][T31673] device bridge_slave_0 entered promiscuous mode [ 1291.520339][T31673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.527468][T31673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.535351][T31673] device bridge_slave_1 entered promiscuous mode [ 1291.554500][T31673] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1291.603745][T31673] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1291.619316][T31673] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1291.627580][T31673] team0: Port device team_slave_0 added [ 1291.633631][T31673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1291.641429][T31673] team0: Port device team_slave_1 added [ 1291.649095][T31673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1291.657282][T31673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1291.724352][T31673] device hsr_slave_0 entered promiscuous mode [ 1291.801956][T31673] device hsr_slave_1 entered promiscuous mode [ 1291.862070][T31673] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1291.869716][T31673] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1291.898166][T31673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.905267][T31673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.912629][T31673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.919668][T31673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.988676][T31673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.001211][T31673] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1292.019455][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.030466][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.045345][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.061937][T31673] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1292.068696][T31673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.085615][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1292.100081][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.107265][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.146449][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.161369][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.168452][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.183497][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1292.210273][T31673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1292.226906][T31673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1292.238283][T31673] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1292.252727][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1292.261098][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1292.275569][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1292.287679][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1292.305471][T31673] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1292.319928][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1292.338955][T31673] 8021q: adding VLAN 0 to HW filter on device batadv0 13:43:56 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:56 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:56 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:56 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:56 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:56 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:57 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1293.013867][T31739] cgroup: fork rejected by pids controller in /syz2 13:43:57 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000000)) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:57 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:57 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:58 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:58 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(0xffffffffffffffff, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:58 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(0xffffffffffffffff, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:58 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(0xffffffffffffffff, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:59 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:43:59 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:43:59 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:00 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:00 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:01 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:01 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:08 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:08 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:08 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:08 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:08 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:08 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:08 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:09 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:09 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1304.819917][T31992] IPVS: ftp: loaded support on port[0] = 21 [ 1305.040346][T31992] chnl_net:caif_netlink_parms(): no params data found [ 1305.079928][T31992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.087140][T31992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.095786][T31992] device bridge_slave_0 entered promiscuous mode [ 1305.107870][T31992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.115233][T31992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.123098][T31992] device bridge_slave_1 entered promiscuous mode [ 1305.143879][T25668] device bridge_slave_1 left promiscuous mode [ 1305.150013][T25668] bridge0: port 2(bridge_slave_1) entered disabled state 13:44:09 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1305.192697][T25668] device bridge_slave_0 left promiscuous mode [ 1305.199087][T25668] bridge0: port 1(bridge_slave_0) entered disabled state 13:44:09 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:09 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:09 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1305.464977][T25668] device hsr_slave_1 left promiscuous mode [ 1305.537453][T25668] device hsr_slave_0 left promiscuous mode [ 1305.598263][T25668] team0 (unregistering): Port device team_slave_1 removed [ 1305.646253][T25668] team0 (unregistering): Port device team_slave_0 removed [ 1305.660683][T25668] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1305.708736][T25668] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1305.773466][T25668] bond0 (unregistering): Released all slaves [ 1305.869173][T31992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1305.880213][T31992] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1305.898575][T31992] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1305.907406][T31992] team0: Port device team_slave_0 added [ 1305.913771][T31992] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1305.922352][T31992] team0: Port device team_slave_1 added [ 1305.928255][T31992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1305.936341][T31992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1305.994688][T31992] device hsr_slave_0 entered promiscuous mode [ 1306.031824][T31992] device hsr_slave_1 entered promiscuous mode [ 1306.072364][T31992] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1306.080008][T31992] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1306.096531][T31992] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1306.166012][T31992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.174666][T31992] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1306.183813][T31992] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1306.192610][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1306.200211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1306.213753][T31992] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1306.220528][T31992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.229552][T31992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1306.237421][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1306.246082][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1306.254516][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.261610][ T7577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.269433][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1306.280167][T31992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1306.288118][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1306.298714][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1306.308827][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.315914][ T7577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.333797][T31992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1306.341918][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1306.352851][T31992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1306.360492][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1306.379805][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1306.388206][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1306.397000][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1306.405831][T28144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1306.415756][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1306.426339][T31992] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1306.433135][T31992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1306.450104][T31992] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1306.460602][T31992] 8021q: adding VLAN 0 to HW filter on device batadv0 13:44:11 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:11 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:11 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:11 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:11 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:12 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:12 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1308.402728][T32082] IPVS: ftp: loaded support on port[0] = 21 [ 1308.539610][T32082] chnl_net:caif_netlink_parms(): no params data found [ 1308.567569][T32082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.574763][T32082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.582553][T32082] device bridge_slave_0 entered promiscuous mode [ 1308.590580][T32082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.597771][T32082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.606125][T32082] device bridge_slave_1 entered promiscuous mode [ 1308.621794][T32082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1308.632453][T32082] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1308.651378][T32082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1308.659483][T32082] team0: Port device team_slave_0 added [ 1308.665559][T32082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1308.673643][T32082] team0: Port device team_slave_1 added [ 1308.679814][T32082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1308.687891][T32082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1308.753386][T32082] device hsr_slave_0 entered promiscuous mode [ 1308.791925][T32082] device hsr_slave_1 entered promiscuous mode [ 1308.832024][T32082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1308.839646][T32082] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1308.855972][T32082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.863059][T32082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.870322][T32082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.877412][T32082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.926978][T32082] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1308.945549][T32082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.005600][T32082] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1309.014771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1309.022824][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.030457][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.038755][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1309.053638][T32082] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1309.060452][T32082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.071429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1309.080560][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.087654][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.105710][ T7577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1309.118895][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.126066][ T7577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.146522][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1309.157876][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1309.166817][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1309.186701][T32082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.214102][T32082] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1309.220835][T32082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1309.237006][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1309.247446][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1309.266681][T32082] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1309.281069][T32082] 8021q: adding VLAN 0 to HW filter on device batadv0 13:44:13 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:13 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:13 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:13 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:13 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:13 executing program 3: mq_open(0x0, 0x0, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:13 executing program 3: mq_open(0x0, 0x0, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:14 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 5: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:14 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:14 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:15 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:15 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 4: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:16 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:16 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:16 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:17 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:17 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1313.172500][T25668] device bridge_slave_1 left promiscuous mode [ 1313.178721][T25668] bridge0: port 2(bridge_slave_1) entered disabled state 13:44:17 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:17 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1313.272351][T25668] device bridge_slave_0 left promiscuous mode [ 1313.278548][T25668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.497361][T25668] device hsr_slave_1 left promiscuous mode 13:44:18 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1313.578755][T25668] device hsr_slave_0 left promiscuous mode 13:44:18 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1313.667863][T25668] team0 (unregistering): Port device team_slave_1 removed 13:44:18 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1313.748538][T25668] team0 (unregistering): Port device team_slave_0 removed 13:44:18 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) [ 1313.791919][T25668] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1313.872159][T25668] bond0 (unregistering): Releasing backup interface bond_slave_0 13:44:18 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:18 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 2: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1314.194196][T25668] bond0 (unregistering): Released all slaves 13:44:18 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:18 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:18 executing program 2: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 2: mq_open(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:19 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, 0x0, 0x0) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:19 executing program 5: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:19 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x1) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="845fad6d82569d12c6fba03e75386bae54ff3033e3c2866fa97fdcd8105aa2e82ae87c265507001769582c27c215bbf510d9969643828f47075546cb9246bb30000000000000000000"], 0x49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x0, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(0x0) gettid() writev(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 13:44:20 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 1: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 3: mq_open(0x0, 0x2, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(0xffffffffffffffff) clock_adjtime(0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 4: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 13:44:20 executing program 2: mq_open(0x0, 0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semget(0xffffffffffffffff, 0x3, 0x1) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) clock_adjtime(0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) open(0x0, 0xe9ba562f9829ffdc, 0x1d0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 1317.372174][T25668] device bridge_slave_1 left promiscuous mode [ 1317.378354][T25668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.462240][T25668] device bridge_slave_0 left promiscuous mode [ 1317.468377][T25668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.626093][T25668] device hsr_slave_1 left promiscuous mode [ 1317.675057][T25668] device hsr_slave_0 left promiscuous mode [ 1317.728345][T25668] team0 (unregistering): Port device team_slave_1 removed [ 1317.739960][T25668] team0 (unregistering): Port device team_slave_0 removed [ 1317.751116][T25668] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1317.796661][T25668] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1317.866724][T25668] bond0 (unregistering): Released all slaves [ 1318.065890][T10156] WARNING: CPU: 0 PID: 10156 at net/batman-adv/multicast.c:371 batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.076985][T10156] Kernel panic - not syncing: panic_on_warn set ... [ 1318.083553][T10156] CPU: 0 PID: 10156 Comm: kworker/u4:7 Not tainted 5.0.0-rc1-next-20190114 #11 [ 1318.092489][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.102546][T10156] Workqueue: bat_events batadv_mcast_mla_update [ 1318.108756][T10156] Call Trace: [ 1318.112018][T10156] dump_stack+0x1db/0x2d0 [ 1318.116341][T10156] ? dump_stack_print_info.cold+0x20/0x20 [ 1318.122043][T10156] ? batadv_mcast_mla_update+0x2080/0x2980 [ 1318.127823][T10156] panic+0x2cb/0x65c [ 1318.131695][T10156] ? add_taint.cold+0x16/0x16 [ 1318.136349][T10156] ? batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.142130][T10156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.148345][T10156] ? __probe_kernel_read+0x1f4/0x250 [ 1318.153604][T10156] ? __warn.cold+0x5/0x48 [ 1318.157905][T10156] ? __warn+0xe8/0x1d0 [ 1318.161950][T10156] ? batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.167735][T10156] __warn.cold+0x20/0x48 [ 1318.171968][T10156] ? batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.177753][T10156] report_bug+0x263/0x2b0 [ 1318.182070][T10156] do_error_trap+0x11b/0x200 [ 1318.186746][T10156] do_invalid_op+0x37/0x50 [ 1318.191141][T10156] ? batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.196922][T10156] invalid_op+0x14/0x20 [ 1318.201054][T10156] RIP: 0010:batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.207499][T10156] Code: 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df be f8 f8 ff ff 66 41 89 34 06 48 c1 ea 03 c6 04 02 f8 e9 87 ea ff ff e8 03 fa ad f9 <0f> 0b e9 cf e6 ff ff e8 f7 f9 ad f9 48 8b 95 00 fe ff ff 49 c1 ee [ 1318.227084][T10156] RSP: 0018:ffff8880554cf788 EFLAGS: 00010293 [ 1318.233121][T10156] RAX: ffff88804e2ce040 RBX: 0000000000000001 RCX: ffffffff87d4213a [ 1318.241064][T10156] RDX: 0000000000000000 RSI: ffffffff87d43a6d RDI: 0000000000000007 [ 1318.249008][T10156] RBP: ffff8880554cf9e0 R08: ffff88804e2ce040 R09: ffff88804e2ce908 [ 1318.256955][T10156] R10: ffff88804e2ce040 R11: 0000000000000000 R12: ffff8880554cf868 [ 1318.264914][T10156] R13: 0000000000000000 R14: 1ffff1100aa99f0d R15: ffff8880554cf9b8 [ 1318.272871][T10156] ? batadv_mcast_mla_update+0x7ba/0x2980 [ 1318.278563][T10156] ? batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.282316][T32038] kobject: 'rfkill412' (00000000a5db1780): kobject_uevent_env [ 1318.284360][T10156] ? batadv_mcast_mla_update+0x20ed/0x2980 [ 1318.292084][T32042] kobject: 'rfkill411' (000000003d20a616): kobject_uevent_env [ 1318.297582][T10156] ? batadv_mcast_tvlv_ogm_handler+0x210/0x210 [ 1318.305120][T32038] kobject: 'rfkill412' (00000000a5db1780): fill_kobj_path: path = '/devices/virtual/bluetooth/hci12/rfkill412' [ 1318.311134][T10156] ? trace_hardirqs_off+0xb8/0x310 [ 1318.326341][T32042] kobject: 'rfkill411' (000000003d20a616): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill411' [ 1318.327919][T10156] ? kasan_check_read+0x11/0x20 [ 1318.340036][T32042] kobject: 'rfkill411' (000000003d20a616): kobject_cleanup, parent (null) [ 1318.344345][T10156] ? do_raw_spin_unlock+0xa0/0x330 [ 1318.344365][T10156] ? process_one_work+0xbf1/0x1ce0 [ 1318.344380][T10156] ? find_held_lock+0x35/0x120 [ 1318.344396][T10156] ? add_lock_to_list.isra.0+0x450/0x450 [ 1318.344415][T10156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.354424][T32038] kobject: 'rfkill412' (00000000a5db1780): kobject_cleanup, parent (null) [ 1318.358864][T10156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.364464][T32038] kobject: 'rfkill412' (00000000a5db1780): calling ktype release [ 1318.368691][T10156] ? check_preemption_disabled+0x48/0x290 [ 1318.374709][T32042] kobject: 'rfkill411' (000000003d20a616): calling ktype release [ 1318.380518][T10156] ? __lock_is_held+0xb6/0x140 [ 1318.390415][T32038] kobject: 'rfkill412': free name [ 1318.396300][T10156] process_one_work+0xd0c/0x1ce0 [ 1318.396317][T10156] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 1318.396331][T10156] ? __switch_to_asm+0x34/0x70 [ 1318.396356][T10156] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 1318.404489][T32042] kobject: 'rfkill411': free name [ 1318.409736][T10156] ? __schedule+0x89f/0x1e60 [ 1318.417848][T32038] kobject: 'hci12' (00000000c7578179): kobject_uevent_env [ 1318.422168][T10156] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1318.422183][T10156] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1318.422201][T10156] ? worker_thread+0x3b7/0x14a0 [ 1318.422215][T10156] ? find_held_lock+0x35/0x120 [ 1318.422234][T10156] ? lock_acquire+0x1db/0x570 [ 1318.428294][T32038] kobject: 'hci12' (00000000c7578179): fill_kobj_path: path = '/devices/virtual/bluetooth/hci12' [ 1318.432153][T10156] ? worker_thread+0x3cd/0x14a0 [ 1318.432174][T10156] ? kasan_check_write+0x14/0x20 [ 1318.432188][T10156] ? do_raw_spin_lock+0x156/0x360 [ 1318.432205][T10156] ? lock_release+0xc40/0xc40 [ 1318.439261][T32042] kobject: 'hci1' (00000000d38afc31): kobject_uevent_env [ 1318.443784][T10156] ? rwlock_bug.part.0+0x90/0x90 [ 1318.443799][T10156] ? trace_hardirqs_on_caller+0x310/0x310 [ 1318.443827][T10156] worker_thread+0x143/0x14a0 [ 1318.443856][T10156] ? process_one_work+0x1ce0/0x1ce0 [ 1318.449497][T32038] kobject: 'hci12' (00000000c7578179): kobject_cleanup, parent (null) [ 1318.454188][T10156] ? __kthread_parkme+0xc3/0x1b0 [ 1318.454205][T10156] ? lock_acquire+0x1db/0x570 [ 1318.454219][T10156] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1318.454233][T10156] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1318.454257][T10156] ? trace_hardirqs_on+0xbd/0x310 [ 1318.462867][T32042] kobject: 'hci1' (00000000d38afc31): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 1318.465905][T10156] ? __kthread_parkme+0xc3/0x1b0 [ 1318.472070][T32038] kobject: 'hci12' (00000000c7578179): calling ktype release [ 1318.477299][T10156] ? trace_hardirqs_off_caller+0x300/0x300 [ 1318.482736][T32042] kobject: 'hci1' (00000000d38afc31): kobject_cleanup, parent (null) [ 1318.486861][T10156] ? do_raw_spin_trylock+0x270/0x270 [ 1318.491930][T32038] kobject: 'hci12': free name [ 1318.501979][T10156] ? schedule+0x108/0x350 [ 1318.502004][T10156] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1318.502019][T10156] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1318.502033][T10156] ? __kthread_parkme+0xfb/0x1b0 [ 1318.502054][T10156] kthread+0x357/0x430 [ 1318.508097][T32042] kobject: 'hci1' (00000000d38afc31): calling ktype release [ 1318.511797][T10156] ? process_one_work+0x1ce0/0x1ce0 [ 1318.511811][T10156] ? kthread_stop+0x920/0x920 [ 1318.511829][T10156] ret_from_fork+0x3a/0x50 [ 1318.517967][T10156] Kernel Offset: disabled [ 1318.682569][T10156] Rebooting in 86400 seconds..