Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. 2020/03/07 08:53:21 fuzzer started 2020/03/07 08:53:23 dialing manager at 10.128.0.26:38841 2020/03/07 08:53:23 syscalls: 2996 2020/03/07 08:53:23 code coverage: enabled 2020/03/07 08:53:23 comparison tracing: enabled 2020/03/07 08:53:23 extra coverage: enabled 2020/03/07 08:53:23 setuid sandbox: enabled 2020/03/07 08:53:23 namespace sandbox: enabled 2020/03/07 08:53:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/07 08:53:23 fault injection: enabled 2020/03/07 08:53:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/07 08:53:23 net packet injection: enabled 2020/03/07 08:53:23 net device setup: enabled 2020/03/07 08:53:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/07 08:53:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:57:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000008a40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)='$', 0x1}, {&(0x7f0000000280)='Z', 0x1}, {&(0x7f0000001ac0)="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", 0x541}, {&(0x7f0000000480)='=', 0x1}, {&(0x7f0000000640)='C', 0x1}, {&(0x7f00000009c0)='F', 0x1}, {&(0x7f0000002ac0)="b27a71e25c409a9ff8cb2733e31bd7a2b06c1c8eef8e84f5290c576a92049611de7faef5503a6932e6373321df639e0e31a644c1d720eff9de99be3e0d467b1b1bb70e8b9909072e644c9b", 0x4b}], 0x7}}], 0x1, 0x600d054) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) dup2(r2, r0) 08:57:25 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) umount2(&(0x7f0000000100)='./file0\x00', 0x0) syzkaller login: [ 327.998351][ T9561] IPVS: ftp: loaded support on port[0] = 21 [ 328.148023][ T9561] chnl_net:caif_netlink_parms(): no params data found 08:57:26 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\xff\xff\xff\x8d\x00@!\a\xff\x8d\x92\x88\xdc\x80\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x10\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c') [ 328.250838][ T9564] IPVS: ftp: loaded support on port[0] = 21 [ 328.339903][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.363723][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.372083][ T9561] device bridge_slave_0 entered promiscuous mode [ 328.403254][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.410445][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.435066][ T9561] device bridge_slave_1 entered promiscuous mode [ 328.481613][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.506713][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.556555][ T9570] IPVS: ftp: loaded support on port[0] = 21 08:57:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0x60, 0x0, 0xffffffffffffff8a) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 328.614403][ T9561] team0: Port device team_slave_0 added [ 328.647022][ T9561] team0: Port device team_slave_1 added [ 328.674775][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 328.718872][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.727757][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.755985][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.796022][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.803004][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.833291][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 08:57:26 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 328.930940][ T9574] IPVS: ftp: loaded support on port[0] = 21 [ 328.988119][ T9561] device hsr_slave_0 entered promiscuous mode 08:57:27 executing program 5: epoll_create(0x3ff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0, 0x0) recvmsg$can_raw(r0, &(0x7f0000001980)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@remote={[], 0x0}, 0x3, 'macvlan1\x00'}) msgget$private(0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x938, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) socket$inet_dccp(0x2, 0x6, 0x0) [ 329.194043][ T9561] device hsr_slave_1 entered promiscuous mode [ 329.294633][ T9580] IPVS: ftp: loaded support on port[0] = 21 [ 329.314880][ T9583] IPVS: ftp: loaded support on port[0] = 21 [ 329.329666][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.336972][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.345793][ T9564] device bridge_slave_0 entered promiscuous mode [ 329.355906][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.363050][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.372030][ T9564] device bridge_slave_1 entered promiscuous mode [ 329.399425][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.424682][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.440721][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 329.481402][ T9564] team0: Port device team_slave_0 added [ 329.490753][ T9564] team0: Port device team_slave_1 added [ 329.571749][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.579055][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.605383][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.620563][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.628201][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.654134][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.723003][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.730301][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.738830][ T9570] device bridge_slave_0 entered promiscuous mode [ 329.752122][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.760022][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.769431][ T9570] device bridge_slave_1 entered promiscuous mode [ 329.846222][ T9564] device hsr_slave_0 entered promiscuous mode [ 329.904228][ T9564] device hsr_slave_1 entered promiscuous mode [ 329.943273][ T9564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.943456][ T9564] Cannot create hsr debugfs directory [ 329.994995][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.020665][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.060840][ T9574] chnl_net:caif_netlink_parms(): no params data found [ 330.078502][ T9570] team0: Port device team_slave_0 added [ 330.089521][ T9570] team0: Port device team_slave_1 added [ 330.108106][ T9561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.187608][ T9561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.283917][ T9561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.329821][ T9561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.400196][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.407275][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.435962][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.450608][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.457691][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.483713][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.553850][ T9583] chnl_net:caif_netlink_parms(): no params data found [ 330.579876][ T9580] chnl_net:caif_netlink_parms(): no params data found [ 330.645271][ T9570] device hsr_slave_0 entered promiscuous mode [ 330.683447][ T9570] device hsr_slave_1 entered promiscuous mode [ 330.743182][ T9570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.750889][ T9570] Cannot create hsr debugfs directory [ 330.813848][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.821118][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.829024][ T9574] device bridge_slave_0 entered promiscuous mode [ 330.867895][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.875130][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.882863][ T9574] device bridge_slave_1 entered promiscuous mode [ 330.967137][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.991827][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.999013][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.007925][ T9580] device bridge_slave_0 entered promiscuous mode [ 331.019133][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.026532][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.034817][ T9580] device bridge_slave_1 entered promiscuous mode [ 331.043395][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.073738][ T9574] team0: Port device team_slave_0 added [ 331.084738][ T9574] team0: Port device team_slave_1 added [ 331.095192][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.102259][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.113638][ T9583] device bridge_slave_0 entered promiscuous mode [ 331.144901][ T9580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.158936][ T9580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.171170][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.178365][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.189173][ T9583] device bridge_slave_1 entered promiscuous mode [ 331.220758][ T9564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.279429][ T9564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.338087][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.345541][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.371907][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.384475][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.391424][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.417355][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.430631][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.449867][ T9580] team0: Port device team_slave_0 added [ 331.462402][ T9580] team0: Port device team_slave_1 added [ 331.469436][ T9564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.539051][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.567764][ T9564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.668964][ T9583] team0: Port device team_slave_0 added [ 331.678412][ T9583] team0: Port device team_slave_1 added [ 331.736885][ T9574] device hsr_slave_0 entered promiscuous mode [ 331.783468][ T9574] device hsr_slave_1 entered promiscuous mode [ 331.833219][ T9574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.840814][ T9574] Cannot create hsr debugfs directory [ 331.847114][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.854083][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.880881][ T9580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.899146][ T9580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.906199][ T9580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.932784][ T9580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.006060][ T9580] device hsr_slave_0 entered promiscuous mode [ 332.043429][ T9580] device hsr_slave_1 entered promiscuous mode [ 332.103169][ T9580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.110745][ T9580] Cannot create hsr debugfs directory [ 332.123637][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.130618][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.156784][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.170158][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.177167][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.203986][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.335342][ T9583] device hsr_slave_0 entered promiscuous mode [ 332.383518][ T9583] device hsr_slave_1 entered promiscuous mode [ 332.423520][ T9583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.431113][ T9583] Cannot create hsr debugfs directory [ 332.482723][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.526703][ T9570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.583954][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.592218][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.602492][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.631340][ T9570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.679034][ T9570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.778547][ T9570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.844657][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.853814][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.862313][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.869516][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.913411][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.921319][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.930202][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.939030][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.946130][ T9569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.976127][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.036009][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.043038][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.052351][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.061228][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.069804][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.078624][ T9574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.129594][ T9574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.177398][ T9574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.234706][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.247170][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.269108][ T9574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.305312][ T9580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.355668][ T9580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.405512][ T9580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.466542][ T9580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.527276][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.535927][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.544547][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.552833][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.573363][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.589226][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.597884][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.615652][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.671035][ T9583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.725726][ T9583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.797261][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.806135][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.815102][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.822175][ T9575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.830198][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.838784][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.848006][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.855171][ T9575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.863528][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.887318][ T9583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.955318][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.966002][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.974815][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.988799][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.003379][ T9583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.047648][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.065326][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.076008][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.084581][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.124802][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.131812][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.140794][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.152392][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.184615][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.193558][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.201841][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.210627][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.219248][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.227910][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.236392][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.243473][ T9590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.255760][ T9564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.269659][ T9564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.292633][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.300955][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.314321][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.322452][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.332274][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.379988][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.390698][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.399707][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.406900][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.415824][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.424414][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.438416][ T9580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.451483][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.467368][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.478305][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.491121][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.520302][ T9580] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.543936][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.552615][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.560972][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.569494][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.578212][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.586828][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.595998][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.604994][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.613766][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.621976][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.630465][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.640521][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.649501][ T9561] device veth0_vlan entered promiscuous mode [ 334.663377][ T9601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.671926][ T9601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.707388][ T9561] device veth1_vlan entered promiscuous mode [ 334.717060][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.732145][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.752222][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.764221][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.772758][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.783767][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.790816][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.798436][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.806579][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.814186][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.822657][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.831064][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.838194][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.846211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.853829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.861500][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.902836][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.911795][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.921050][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.929673][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.936784][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.944491][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.953006][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.961647][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.970264][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.977361][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.985402][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.994325][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.002629][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.011246][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.021293][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.031639][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.082273][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.091023][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.100178][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.112019][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.120586][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.129546][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.154492][ T9580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.162693][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.172704][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.191114][ T9561] device veth0_macvtap entered promiscuous mode [ 335.202818][ T9561] device veth1_macvtap entered promiscuous mode [ 335.228203][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.236256][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.245124][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.255147][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.263434][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.272155][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.282848][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.291281][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.300135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.311749][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.346494][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.355003][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.365256][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.374963][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.387227][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.394781][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.417906][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.441415][ T9574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.453480][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.461200][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.470749][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.479182][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.487914][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.502402][ T9570] device veth0_vlan entered promiscuous mode [ 335.513354][ T9580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.529588][ T9583] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.559153][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.567814][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.579462][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.587453][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.595752][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.605172][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.620779][ T9570] device veth1_vlan entered promiscuous mode [ 335.630346][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.643613][ T9564] device veth0_vlan entered promiscuous mode [ 335.663786][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.671502][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.689799][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.701995][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.710631][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.719617][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.728737][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.737614][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.745247][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.806418][ T9564] device veth1_vlan entered promiscuous mode [ 335.815639][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.824610][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.833020][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.840178][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.849106][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.858966][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.868008][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.875121][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.883017][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.891973][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.918011][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.944061][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.952833][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.962560][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.059651][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.069221][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.078397][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.088447][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.097926][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.106587][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.136437][ T9570] device veth0_macvtap entered promiscuous mode [ 336.179788][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.188024][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.196449][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.206017][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.215184][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.223757][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.232133][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.240752][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.258409][ T9570] device veth1_macvtap entered promiscuous mode [ 336.365576][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.384064][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.392996][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.403014][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.411863][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.420794][ T9580] device veth0_vlan entered promiscuous mode [ 336.439088][ T9574] device veth0_vlan entered promiscuous mode [ 336.451666][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.460324][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.468629][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.477194][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.488422][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.497052][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.510075][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.521591][ T9580] device veth1_vlan entered promiscuous mode [ 336.534182][ T9564] device veth0_macvtap entered promiscuous mode [ 336.595287][ T9564] device veth1_macvtap entered promiscuous mode [ 336.619890][ T9612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 336.626205][ T9574] device veth1_vlan entered promiscuous mode 08:57:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000440)=0x2) r1 = socket$packet(0x11, 0x0, 0x300) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x9) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x624980, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4fbda57592daaa17318266a5d607b3fe9892c2059e4e3f515fbe61528594e2a88e3a27a377584f6024040e22c747703b9d068c906182f0d7a3e8ab6370ad1b984fb9acdc81a514fd737b569b275b39a46e346f4cb1f8a161cd73ede8b17f3437c83ab16f9bd910eae4cfe29d56aaa1d0b360c219fbae8c1e1c57daa9a50248d3d91ff8769128d053e9e7719933e60db675735dedce47100626e0c31c5d175624dabde399ecf68ec8860c944e696a29d679aa10a3f4", @ANYRESHEX], 0x2, 0x0) gettid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r4 = getpid() r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x103000, 0x0) sched_getparam(r4, &(0x7f0000000200)) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'gretap0\x00', 0x2}, 0x18) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000380)={0x0, r5, 0x54, 0x4, 0x8, 0x100000000}) [ 336.659976][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.671637][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.684716][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.726044][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.744984][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.763615][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.771555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.780160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.788190][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.795798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.803816][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.814709][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.823682][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.832395][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.859819][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.871981][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.893158][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.905992][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.958711][ T9580] device veth0_macvtap entered promiscuous mode [ 336.963090][ C1] hrtimer: interrupt took 42838 ns [ 336.982462][ T9580] device veth1_macvtap entered promiscuous mode [ 336.991933][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.000815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.009727][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.019373][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.028220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.037555][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.048904][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.059467][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.070159][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.082296][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.161445][ T9574] device veth0_macvtap entered promiscuous mode [ 337.185164][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.193746][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.202506][ T9575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 08:57:35 executing program 0: r0 = getpid() r1 = getpgrp(r0) setpriority(0x0, r1, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) geteuid() syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x20140) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x0, 0xa81) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070777d0000009000701020000090000000000200003050013800100", 0x22) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x2f}, 0x90) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) r4 = open(0x0, 0x0, 0x0) read$eventfd(r4, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10f081, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x0, 0x0, 0x10000101) openat$pfkey(0xffffffffffffff9c, 0x0, 0x61800, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x60) fallocate(r6, 0x0, 0x0, 0x10000101) r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) read$eventfd(r7, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) [ 337.228756][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.250841][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.260946][ T9564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.293175][ T9564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.320071][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.353007][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.375608][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.422304][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.434162][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.450783][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.466720][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.478379][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.490396][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.503521][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.517216][ T9574] device veth1_macvtap entered promiscuous mode [ 337.571655][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.595666][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.605018][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.617227][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.642312][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.657819][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.668536][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.686454][ T9580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.701678][ T9580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.719561][ T9580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.759796][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.778879][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.792398][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.802292][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.868135][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 337.868147][ T27] audit: type=1800 audit(1583571455.732:31): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16519 res=0 [ 337.878194][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.911566][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.913156][ T27] audit: type=1800 audit(1583571455.772:32): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16519 res=0 [ 337.922094][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 08:57:35 executing program 0: r0 = getpid() r1 = getpgrp(r0) setpriority(0x0, r1, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) geteuid() syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x20140) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x0, 0xa81) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070777d0000009000701020000090000000000200003050013800100", 0x22) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x2f}, 0x90) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) r4 = open(0x0, 0x0, 0x0) read$eventfd(r4, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10f081, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x0, 0x0, 0x10000101) openat$pfkey(0xffffffffffffff9c, 0x0, 0x61800, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x60) fallocate(r6, 0x0, 0x0, 0x10000101) r7 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) read$eventfd(r7, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) [ 337.950151][ T27] audit: type=1800 audit(1583571455.772:33): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16519 res=0 [ 337.953913][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.982715][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 337.993381][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.004141][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 338.016243][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.039520][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.128473][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.140085][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.152107][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 338.167892][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.178748][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 338.189548][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.200664][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 338.211775][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 08:57:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53}, 0x4000, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f0000000240)=""/157, 0x9d}], 0x2, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xe43) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xcf) [ 338.222305][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 338.234676][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.247863][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.272439][ T9583] device veth0_vlan entered promiscuous mode [ 338.345924][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.360870][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:57:36 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/100, 0xfffffffffffffed6}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000380)=0xff, 0x4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r13, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r13, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r14 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f00000001c0)={0x81, 0xaf, 0xff, 0x2, 0x4a, 0x97, 0x6, 0x5, 0x1, 0x1f, 0x3, 0xbb, 0x16, 0x1}, 0xe) get_mempolicy(0x0, 0x0, 0x8001, &(0x7f000073b000/0x4000)=nil, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 338.408756][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.432368][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 08:57:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000200)={0x20, 0xfffffffffffffff5, 0x5, {0x2, 0x4, 0x0, 0x6}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0xff0a) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x18b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x3, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x9762}, 0x0, 0xfffffffffffffffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eti0\x00', 0x42, 0x8, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/130, 0x9a2733f6c2698b56, 0x20000180, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)=@sack_info={r2, 0xff, 0x10001}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="744ddf6a2c427367d7e18c968eb00ed4b58925c475dc9c96f4929bffc4050000004a", @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0d092d387078170000ff7fffff95ec0e00ff20d10500000000000000000000000042ab8b2776e6b2aa9020cce411"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000340)={[0xffff, 0x1, 0xffffffff, 0x0, 0x7fff, 0x9, 0x6, 0x7f, 0x1, 0x9750, 0x7, 0x942, 0xffffffffffffffff, 0x9, 0x7, 0x7], 0x4000, 0x408}) [ 338.536003][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.555174][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.668242][ T9583] device veth1_vlan entered promiscuous mode [ 338.722982][ T9666] overlayfs: conflicting lowerdir path [ 338.738201][ T9666] overlayfs: conflicting lowerdir path [ 338.801995][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.814151][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 08:57:36 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 339.010386][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.046453][ T9603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.080963][ T9583] device veth0_macvtap entered promiscuous mode 08:57:37 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 339.149378][ T9583] device veth1_macvtap entered promiscuous mode 08:57:37 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0xb, 0x0) ioctl(r0, 0x8001800000006, &(0x7f0000000180)="5e58b9e53b71f530f6bffab0f062c2b6dc1b8486181aab812a17d633af63bff0eb58f96509941aab2b5d99092d7d0b34d903e0ec5734ad7646f40240319d047a31a4951d34a2711741f5083332a8f740aeff1dd4c92b75854e5814da55e6085a6a3e2f204c39b35df9d6a15cfd5e1037fd0cf6d772268e56a2b1828dfaa9fb6e4780ed18bd058a26a83567afec09058c2f804f2fe621645c43685dffffa7cacb3f3622d304b77d98e2032c5ce1ab5f5a6d0f24e8182aa40c1153f731cb1747") syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xffff, 0x1000) [ 339.322703][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 339.420620][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.468657][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 08:57:37 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @redirect={0x3, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @dev}, "d65315064cb02bac"}}}}}, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r6, 0x0) r7 = socket(0x10, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000080)=0xfffffffc, &(0x7f0000000180)=0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r9, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x7, r1}, {0x2, 0x1, r3}], {0x4, 0x4}, [{0x8, 0x2, r5}, {0x8, 0x0, r6}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r9}, {0x8, 0x2}], {0x10, 0x5}, {0x20, 0x5}}, 0x5c, 0x1) setfsgid(r6) 08:57:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000100)=@secondary='builtin_and_secondary_trusted\x00') msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000850089c5c6804a53d172499956bbc952bb586fcefa57f987e46bde9ff765af91f527f6250611fc6b684150bc481fbff3d29dbd8fe04de6e756c61f2da64cbe68ceedef9f9a4837bc3c77ade2c8903cabdb22f31635e6edbff434bd4623be3fad84703b4c88ccdf98ebf5b4e7874aabefe971ea0988e3d420a5c790b4f5f09d73d60da249a98c96585fbfbd0d910ff09965389fb39542a733da093e203c32b0963c49e942d87e89adfc94f0fa10907ad206e9d493aeef00"/197, @ANYRES16=r4, @ANYBLOB="16012cbd7000fedbdf250300000005000200ad00000005000300060000000500030009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) [ 339.530971][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.568651][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 339.624225][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.653142][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 339.694027][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.728854][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 339.748000][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.772646][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.793720][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.802168][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.826091][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.835405][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.857176][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 339.876196][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.891317][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 339.905919][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.919034][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 339.951908][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.976999][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 340.013130][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.043132][ T9583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 340.073183][ T9583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.128192][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.184103][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.205937][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.764168][ T9708] IPVS: ftp: loaded support on port[0] = 21 [ 341.065809][ T9708] IPVS: ftp: loaded support on port[0] = 21 08:57:39 executing program 5: epoll_create(0x3ff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0, 0x0) recvmsg$can_raw(r0, &(0x7f0000001980)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@remote={[], 0x0}, 0x3, 'macvlan1\x00'}) msgget$private(0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x938, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) socket$inet_dccp(0x2, 0x6, 0x0) 08:57:39 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000200)={0x20, 0xfffffffffffffff5, 0x5, {0x2, 0x4, 0x0, 0x6}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0xff0a) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x18b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x3, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x9762}, 0x0, 0xfffffffffffffffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eti0\x00', 0x42, 0x8, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/130, 0x9a2733f6c2698b56, 0x20000180, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)=@sack_info={r2, 0xff, 0x10001}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="744ddf6a2c427367d7e18c968eb00ed4b58925c475dc9c96f4929bffc4050000004a", @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0d092d387078170000ff7fffff95ec0e00ff20d10500000000000000000000000042ab8b2776e6b2aa9020cce411"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000340)={[0xffff, 0x1, 0xffffffff, 0x0, 0x7fff, 0x9, 0x6, 0x7f, 0x1, 0x9750, 0x7, 0x942, 0xffffffffffffffff, 0x9, 0x7, 0x7], 0x4000, 0x408}) 08:57:39 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3d, 0x5b1400) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) 08:57:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r8, 0x40049409, r11) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:39 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 341.760273][ T9721] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:57:39 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 341.924299][ T9588] tipc: TX() has been purged, node left! 08:57:39 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000081000000bd0000000000000095000000000000f8"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 08:57:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r8, 0x40049409, r11) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r8, 0x40049409, r11) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 342.327867][ T9735] IPVS: ftp: loaded support on port[0] = 21 08:57:40 executing program 5: epoll_create(0x3ff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0, 0x0) recvmsg$can_raw(r0, &(0x7f0000001980)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@remote={[], 0x0}, 0x3, 'macvlan1\x00'}) msgget$private(0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x938, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) socket$inet_dccp(0x2, 0x6, 0x0) 08:57:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x51, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r3, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6, 0x7, 0x6, 0xdb}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x28402, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x7, &(0x7f0000000140)={@mcast1}, &(0x7f0000000240)=0x14) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2010) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5ece2d86c18418bb}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3b}}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x5c}}, 0x1) write$evdev(r0, &(0x7f0000000040), 0x373) 08:57:40 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffd71}, {0x0, 0x1e1}, {&(0x7f0000000140)=""/66, 0x4}], 0x3, 0x0, 0xb9, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(r1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ppoll(&(0x7f00000000c0)=[{}, {}, {r8}], 0x3, &(0x7f00000001c0), 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="b2cb4e7ce12c58b469fec4ce51b66b82110a7159aa36e5d9d735a5b59dacab465ff7db89299015007f04143cbf3ffadc0cc43670e297c1e1df2a172b54b010b035f9088cc29b0b6ce7b1305afc0f27909c01e6f718e93bd971dcc597aa70d03a5781edbd42b724ba77faba5c368cc7b3c4e00327d67f0f33b5994f8b334657c95a9575c95940cfa93ea391380b87312ddaa8b0b44e43b1f9fcd9d9", @ANYRES32=r9, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x78) ioctl$TIOCNOTTY(r9, 0x5422) prctl$PR_SVE_SET_VL(0x32, 0x614d) 08:57:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r8, 0x40049409, r11) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r8, 0x40049409, r11) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) socketpair(0x5, 0x3, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)="068b4e8c858301b565fc406d65ded0e6b43bb3a7572993dfd13e6bf0f3270b437dda3d387ac9bc2641c30dd460bf69d586da47fb9c8055e9d127c65ea153f0ddb2982e8a5ab1bcd1208a3fbe6067e3ebf80e3d534eae671b64beb68abffb017e698bfb2b86611d7468686d8e5fa58470b250af2f34496f562933dc8b5c6d692d2050a29cd8540fbdbdd89d314ed75f80c119f6c7880c6efd286153", 0x9b}, {&(0x7f0000000200)="b10b5bbdf64e1063eeff6d7d9e16e125d97913be1b402f3c206d16ceb90b543c86b20246261016f21c088864d8088bb0ea5d9f243f79e2131dc2ba2e886cfc813af68bd26698ffd2538e78edb22977114a2dca6b4b08f6cf415465ca89812f4d26cac38502aeee82a6c863f5000f9f6f0478a227346cb3a579b7b39ef7515fe9748d30c84902b89e39365db84ba49b", 0x8f}, {&(0x7f00000002c0)="65c0a3d7fd88d55ee1154d8b75cad0324e219494c7b99c4bb4bd872d95e830e1170d0441d019578b38a6170f4a4d3eac8016c808514db54d783c2847ce405e840b328c9b43fd9eda40a0a9e4542c2db2c794f86e87fc43219f391fdf4f36b2f4edbd21fcb07ac5086930dddf5dd06f8b2f938531fbb6a59ae708a305807f3ce224653af1fbc96fb3c29e2e534366f907cee5546a2ad462e4d028020d6c47107af673ec4245c20d63929c293e17fea94cdb5aa731457727ad710eaeaef98ae80f46e437af013d1c0bc53fc2", 0xcb}, {&(0x7f00000003c0)="b5e8ae81f08507a61cd5c40b", 0xc}, {&(0x7f0000000400)="a851194b2c9cc7ed2ce1002a0ed6df3d7303d436d75fdad7ec2431cfb63e95f99940ddfee83efd12469e8ab69c22170549116713f5b544dcc2886c2b8496ee6a9cfd7e8634b324500024aa8510b30a531884366c659a89c5d1cfbc8778147dee1a33f2e734bd2032e52d878be42d1b6fda84db5e496a0664ff23df9e4e740aa4bd01b48d0e90", 0x86}], 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="5000000000080000c6010000ff010000bb689a6ce7d4df62d10a599d93630082fea66e2090c053193dd81b302c8df9c7d7ab577d1589b39a2a8b18acb35f7bd67531ca9910c597547fcb3b30ce781676"], 0x50}, 0x4) [ 343.182895][ T9787] IPVS: ftp: loaded support on port[0] = 21 08:57:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r8, 0x40049409, r11) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r8, 0x40049409, r11) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:41 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x78) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000300)={0x5, {{0x2, 0x4e20, @local}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}]}, 0x310) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/167) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fd8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:41 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:41 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 345.113216][ T9588] tipc: TX() has been purged, node left! [ 345.273143][ T9588] tipc: TX() has been purged, node left! [ 345.433308][ T9588] tipc: TX() has been purged, node left! 08:57:43 executing program 2: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0xe, 0x4) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000000)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 08:57:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$FICLONE(r6, 0x40049409, r9) 08:57:43 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000300)=r4) r5 = syz_open_dev$vcsa(0x0, 0x4, 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xa207, 0x400f1f, 0x0, 'queue1\x00', 0x4}) r6 = pidfd_getfd(r3, r5, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)={0xc0000000}) 08:57:43 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:43 executing program 5: gettid() creat(0x0, 0x10003) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb1) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="b8ed65500357609aeb2c35eb4a46b93ecefe651da7f87c7c8a528eecc6c1d9c884168eabb8fb4390ef03409f465eff2377e9ea81c4c983e168452eaf7dfb7bf7661975a931d94eaeb85bfcedeed3fb763e0e312a28b340b24ab3edb93570a10d", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2], 0x7, 0x1) r3 = gettid() waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) kcmp(r5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") openat$procfs(0xffffffffffffff9c, &(0x7f0000001e40)='/proc/locks\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57) write(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="8dfe990aa8591e7323de5c1b5b11e6d02368e46ff8aa876b4226a7737fc1c4465206e8bb37405a06c20900ccae8dcab8113bd5d40b1be08d5af1cdd6cf479dece0112bfb247981fe", @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x200000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}, @map={0x18, 0x0, 0x1, 0x0, r12}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000600)=ANY=[@ANYRESDEC=r12], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x78) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x78) ioctl$VIDIOC_PREPARE_BUF(r13, 0xc058565d, &(0x7f0000000280)={0x6, 0xc, 0x4, 0x400, 0x8, {}, {0x2, 0x2, 0x5, 0x6, 0x1, 0xff, "9ee27470"}, 0x9, 0x5, @offset=0xe45d, 0x2, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000900)={r15, 0x1, 0x6}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r6, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) write$P9_RFSYNC(r6, &(0x7f0000000180)={0x7}, 0xfdef) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e22, @multicast1}}) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r16, 0x0, 0x0) ioctl$KVM_SMI(r16, 0xaeb7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 345.989042][ T9840] ubi0: attaching mtd0 08:57:43 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 346.071225][ T9840] ubi0: scanning is finished [ 346.085426][ T9840] ubi0: empty MTD device detected 08:57:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:44 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0ef9042c379983fe48e8707000000004187f378dfcdeb9a7fbd3c236bfa1c251b4a45bfe30f224dc5e314658f7c945fa4adbb2c92be32dc79b39812dda876840f3f971dd75e672689aef984a53a00000084b073dbf657e3dc055b21f739c214b1b5826201b8f76576a34aba813f2ea93a58330bf9f488935756d39ce30d7367c2b49035a644277d06e4bc"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 346.506395][ T9875] nfs: Bad value for 'source' [ 346.550898][ T9840] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 346.577128][ T9840] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 08:57:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:44 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 346.597497][ T9840] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 346.606139][ T9840] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 346.625761][ T9883] nfs: Bad value for 'source' [ 346.647810][ T9840] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 08:57:44 executing program 2: pipe2(0x0, 0x80000) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000340)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x800, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4010804) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x101000, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800000, 0x110, r2, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 346.686408][ T9840] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 346.720332][ T9840] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2869562886 08:57:44 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 346.765230][ T9840] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 346.790064][ T9880] ubi0: background thread "ubi_bgt0d" started, PID 9880 [ 346.809020][ T9848] ubi0: detaching mtd0 [ 346.893990][ T9848] ubi0: mtd0 is detached 08:57:44 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000300)=r4) r5 = syz_open_dev$vcsa(0x0, 0x4, 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xa207, 0x400f1f, 0x0, 'queue1\x00', 0x4}) r6 = pidfd_getfd(r3, r5, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)={0xc0000000}) 08:57:44 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 347.079168][ T9904] ubi0: attaching mtd0 [ 347.130774][ T9904] ubi0: scanning is finished [ 347.404578][ T9904] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 347.427030][ T9904] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 347.451937][ T9904] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 347.477289][ T9904] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 347.492149][ T9904] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 347.529826][ T9904] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 347.573255][ T9904] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2869562886 [ 347.667305][ T9904] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 347.763719][ T9911] ubi0: background thread "ubi_bgt0d" started, PID 9911 08:57:45 executing program 5: gettid() creat(0x0, 0x10003) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="01204f46b54541673cb62d39a53b3045d0479238e4000000800000000000c09004000000000000009aefdb1a5d4365377735b04e028fac179b2154d606580e10287dd810ec0d89991acd1672cc4f8c4fc75adcf1065c1d4aae08aa5198d32d47fc45da1b1667fdf60ef7f039deabc19822b589524bb643df147f67e6b45d82915d473afd3ea6f4b2419dc346680d6fe463b0b5065431dfde2f147f59cae9065187c6b90151066bbdeec29f3337f8b6b4c79cc2baf1a9064ad6187f018982c7b2a032a3cc1746a3ec15755937bbcc31c96157a9d973f2284367b1de45e2602defa9eb1ea6b1e2c7035ac9123321126085a7af350d98a1f74fdc61ffbabd5748aea5ac355bd3f7b3d67158a044120008d5fdc9a3dacc27de306f95eb17a89358239ec5932cfb462803a998167c96ea63adb347164e7ecd6648a5fc993b95f5fe8722c05219ded2cb75cb8ecc25d198663b6167f5ec689ddc215cba73878d0e25a6bcf047d5cfb777a93808ffc62ecbe509011717a02e2d1e1c2a4c8c6c6b1f0d5e88a70b5f061f2d9d9e3548b46c3fcc0c219d3547b45f81e228912ec98296cf73891d"], 0xb1) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="b8ed65500357609aeb2c35eb4a46b93ecefe651da7f87c7c8a528eecc6c1d9c884168eabb8fb4390ef03409f465eff2377e9ea81c4c983e168452eaf7dfb7bf7661975a931d94eaeb85bfcedeed3fb763e0e312a28b340b24ab3edb93570a10d", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2], 0x7, 0x1) r3 = gettid() waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) kcmp(r5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") openat$procfs(0xffffffffffffff9c, &(0x7f0000001e40)='/proc/locks\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57) write(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="8dfe990aa8591e7323de5c1b5b11e6d02368e46ff8aa876b4226a7737fc1c4465206e8bb37405a06c20900ccae8dcab8113bd5d40b1be08d5af1cdd6cf479dece0112bfb247981fe", @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x200000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}, @map={0x18, 0x0, 0x1, 0x0, r12}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000600)=ANY=[@ANYRESDEC=r12], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x78) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x78) ioctl$VIDIOC_PREPARE_BUF(r13, 0xc058565d, &(0x7f0000000280)={0x6, 0xc, 0x4, 0x400, 0x8, {}, {0x2, 0x2, 0x5, 0x6, 0x1, 0xff, "9ee27470"}, 0x9, 0x5, @offset=0xe45d, 0x2, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000900)={r15, 0x1, 0x6}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r6, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) write$P9_RFSYNC(r6, &(0x7f0000000180)={0x7}, 0xfdef) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e22, @multicast1}}) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r16, 0x0, 0x0) ioctl$KVM_SMI(r16, 0xaeb7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:57:45 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:45 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:45 executing program 4: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:46 executing program 4: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:46 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000104000000040000000000000000", @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x3, 0x0) 08:57:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:46 executing program 4: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0xc) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 08:57:46 executing program 5: gettid() creat(0x0, 0x10003) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb1) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="b8ed65500357609aeb2c35eb4a46b93ecefe651da7f87c7c8a528eecc6c1d9c884168eabb8fb4390ef03409f465eff2377e9ea81c4c983e168452eaf7dfb7bf7661975a931d94eaeb85bfcedeed3fb763e0e312a28b340b24ab3edb93570a10d", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2], 0x7, 0x1) r3 = gettid() waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) kcmp(r5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") openat$procfs(0xffffffffffffff9c, &(0x7f0000001e40)='/proc/locks\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57) write(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="8dfe990aa8591e7323de5c1b5b11e6d02368e46ff8aa876b4226a7737fc1c4465206e8bb37405a06c20900ccae8dcab8113bd5d40b1be08d5af1cdd6cf479dece0112bfb247981fe", @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x200000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}, @map={0x18, 0x0, 0x1, 0x0, r12}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000600)=ANY=[@ANYRESDEC=r12], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x78) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x78) ioctl$VIDIOC_PREPARE_BUF(r13, 0xc058565d, &(0x7f0000000280)={0x6, 0xc, 0x4, 0x400, 0x8, {}, {0x2, 0x2, 0x5, 0x6, 0x1, 0xff, "9ee27470"}, 0x9, 0x5, @offset=0xe45d, 0x2, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000900)={r15, 0x1, 0x6}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r6, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) write$P9_RFSYNC(r6, &(0x7f0000000180)={0x7}, 0xfdef) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e22, @multicast1}}) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r16, 0x0, 0x0) ioctl$KVM_SMI(r16, 0xaeb7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:57:46 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_user\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0xe3b, 0x4}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 08:57:46 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x78) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:47 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:47 executing program 1: r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='+\x00', 0xfffffffffffffffb) r1 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="447d2ad691502a9d5f1f1b0302e8548c2ecf76a0df5b91ed74b7061d74d7ef8642bc5b5d6868c046", 0x28, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) keyctl$link(0x8, r0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, r9, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc9f}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb26}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x44ba976c}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000810) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) accept$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x100000e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) 08:57:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x307, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c001a0000000025", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002009e9ba3ca06000000"], 0x3c}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000240)=0x4) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105000, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x417) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000000)={r12, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000001c0)={r12, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000003c0)={r8, 0xfffffffd, 0x2, 0x4c7f, 0x0, 0x4, 0x4, 0x2, {r12, @in6={{0xa, 0x4e24, 0x7f, @ipv4={[], [], @multicast1}, 0x7}}, 0x9, 0x1, 0x2, 0x9b0b, 0x100}}, &(0x7f0000000280)=0xb0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1f}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) 08:57:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:47 executing program 5: gettid() creat(0x0, 0x10003) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xb1) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="b8ed65500357609aeb2c35eb4a46b93ecefe651da7f87c7c8a528eecc6c1d9c884168eabb8fb4390ef03409f465eff2377e9ea81c4c983e168452eaf7dfb7bf7661975a931d94eaeb85bfcedeed3fb763e0e312a28b340b24ab3edb93570a10d", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2], 0x7, 0x1) r3 = gettid() waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000480)) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) gettid() r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) kcmp(r5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") openat$procfs(0xffffffffffffff9c, &(0x7f0000001e40)='/proc/locks\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57) write(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="8dfe990aa8591e7323de5c1b5b11e6d02368e46ff8aa876b4226a7737fc1c4465206e8bb37405a06c20900ccae8dcab8113bd5d40b1be08d5af1cdd6cf479dece0112bfb247981fe", @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x200000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}, @map={0x18, 0x0, 0x1, 0x0, r12}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000600)=ANY=[@ANYRESDEC=r12], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x78) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x78) ioctl$VIDIOC_PREPARE_BUF(r13, 0xc058565d, &(0x7f0000000280)={0x6, 0xc, 0x4, 0x400, 0x8, {}, {0x2, 0x2, 0x5, 0x6, 0x1, 0xff, "9ee27470"}, 0x9, 0x5, @offset=0xe45d, 0x2, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000900)={r15, 0x1, 0x6}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r6, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) write$P9_RFSYNC(r6, &(0x7f0000000180)={0x7}, 0xfdef) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e22, @multicast1}}) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r16, 0x0, 0x0) ioctl$KVM_SMI(r16, 0xaeb7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:57:47 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:47 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 349.765509][T10001] XFS (loop1): Mounting V4 Filesystem [ 349.819900][T10001] XFS (loop1): totally zeroed log [ 349.836921][ T9575] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x37f/0x550, xfs_agi block 0x2 08:57:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x18, &(0x7f0000000840)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32=r1], @ANYRES32=r1, @ANYBLOB="22e0553fa3bf89a688bb040d80ffc3131580506a50e191a3619cb88c46aaa94ba9c000c31b62375c6bb5b45069e04ca157f4419c298b448a7b725886cc17a2a70f1c06f9a1feb0ea46dfc440f2287f3aeecf505193ecd7bb5d60a1e8569396c0559edc90b42686e5cd5ec21c33388cc380835a480b9442e313500e4bce350ab892b1cf8b04f429174a88e77f6a5c441159d72f672d7e216bccff245169c33fe1fc0b51adb5ce381a3c4f2b76acd16bdc032607baa67a3f7714"], 0x0, 0xa87, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="20815c341c62e5cdfcde76811659aa431b1d79522cbfa9bdbcf7dc021bac4a308de04ce25688ffbcdaed7671ddcd951515c7c019df5b3644d3b53a36a06520425e2836639c1aa6745e80482a33fca072e7e94f644db5b2acd7b008000000a522e65e614609ee157d6c927dd41c7b4816ee06000000000000007ef1e1cd88d34ee65a903274eeed81f11c4ed7354e4dae9bf49a06117b699494f7d04e858a42379059ec6781e443ca74fad280f629c996ca319327f6c422cf92a1338fd7fc6e59016b0a62f8d80ef6d440235064fe1673cdf5287f51c4f86e65b8e8feb6b8cce5090c590d43b1874c5271a7999c6a3e5ee113e8438a56888a809ea215639b68498c2cdcf5", @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff950000000000400018837247b933614024000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="8cc67240c0b0a9e86e1f3bd85c7c1892fb4900834747f8fe630b45a40296fa0bdba9c34cf1242bb7bcf362df3befc3d6641317cd3355816ffab9604afa3d4b1879ced960ca31e804ec4c5e4ddd76da5acb18e878ed535eff65dd07efc774259b1068240a45849a3070eac268ab4a5f9f1e28c39c060000003aa6b12b00d8940eead57c6f2e2502d0fd6a5195fd6991f2e75e223a48c78e7f1e52d543bd1bacf61ea302a0b839565d8dd935b0c5283f585860305ffe72737204ab6753a1547d02c38b22bb48b731f56f0c72c280eec3e7b531e93288283a0070fbf6554030bd76076d66450e26238ab8bd24c22d608fdbdaf4eb50fc543bcd153cef2e0fb847691500d4f94d6d35afa552a598e4bf426ee9ff2ff6b51bd82aad0ef0074e8c", @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff910000000000400018000eaee832ff7e900000000000d89d90aaccfb498ba9e155ae41f8726b16d66b455994f9d57fe8d263b1231dae0b70fb073f7c046c1470b595ad336594cdd35e9cdaba7c9963726f2fda636573784fde7886944c9d27e906d49145784e1c6a15ebba83"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) socket$bt_rfcomm(0x1f, 0x0, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = accept4(r0, 0x0, 0x0, 0x80800) fcntl$setstatus(r4, 0x4, 0x2800) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r4, r5, 0x0, 0x10000000000443) r6 = getpid() sched_setscheduler(0x0, 0x5, 0x0) r7 = getpgrp(r6) setpriority(0x0, r7, 0xffff) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0xff, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x1ff80000000}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x3) syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) geteuid() syz_open_dev$evdev(0x0, 0x200, 0x20140) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) r8 = getpid() sched_setscheduler(r8, 0x0, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070777d0000009000701020000090000000000200003050013800100", 0x22) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x0, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 08:57:47 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 349.992342][ T9575] XFS (loop1): Unmount and run xfs_repair [ 350.054040][ T9575] XFS (loop1): First 128 bytes of corrupted metadata buffer: 08:57:47 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 350.101132][ T9575] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.122522][ T9575] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.131963][ T9575] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:57:48 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 350.177927][ T9575] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.198813][ T9575] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.222405][ T9575] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.231975][ T9575] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.258757][ T9575] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 350.282066][T10001] XFS (loop1): metadata I/O error in "xfs_read_agi+0x1ea/0x5a0" at daddr 0x2 len 1 error 117 [ 350.338534][T10001] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 350.388396][T10001] XFS (loop1): Failed to read root inode 0xd88, error 117 08:57:48 executing program 1: r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='+\x00', 0xfffffffffffffffb) r1 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="447d2ad691502a9d5f1f1b0302e8548c2ecf76a0df5b91ed74b7061d74d7ef8642bc5b5d6868c046", 0x28, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) keyctl$link(0x8, r0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, r9, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc9f}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb26}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x44ba976c}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000810) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) accept$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x100000e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) 08:57:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x2172, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x210001, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000480)={0x8, {{0x2, 0x4e24, @loopback}}, 0x1, 0x1, [{{0x2, 0x4e23, @remote}}]}, 0x110) move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000000000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1], &(0x7f0000000180), 0x0) 08:57:48 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2e2f66696c6530ec1760a1a3cfd493e44d4b078562603e97c347b9103a8fa12b9bcecc7e871741fc5fbdcfb42100cf3a118a571b864b1dbe874fd4a9e29b2ba8f90c31e6db23000000000000007543306b"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1085006, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1308462, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x40, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x5}, 0x0, 0x0, &(0x7f0000000300)={0x1, 0x3, 0x0, 0x7}, &(0x7f0000000480)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/241) 08:57:48 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x416c, 0x1}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() getpid() ptrace$peek(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x0) r2 = epoll_create1(0x0) capget(&(0x7f0000000040), &(0x7f0000000100)={0xffff, 0x4, 0x10001, 0x2, 0x8c35, 0x3f}) r3 = getpid() ptrace$getsig(0x4202, r3, 0x1, &(0x7f0000000140)) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000280)={0x4000201f, 0x3f000002}) r5 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105000, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x417) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000000)={r9, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={r9, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r9, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000240)=0x10) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) close(r4) mkdir(0x0, 0x0) 08:57:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x65}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x40000000002, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x4, 0x406143) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) dup(r4) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) socket(0x6, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = dup(0xffffffffffffffff) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_ADDRESS={0xc, 0x1, @local}]}, 0x2c}}, 0x0) 08:57:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 351.219688][T10089] vivid-005: kernel_thread() failed [ 351.292429][T10080] XFS (loop1): Mounting V4 Filesystem [ 351.325513][T10080] XFS (loop1): totally zeroed log [ 351.331456][T10080] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x37f/0x550, xfs_agi block 0x2 [ 351.342047][T10080] XFS (loop1): Unmount and run xfs_repair [ 351.347995][T10080] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 351.355919][T10080] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.365455][T10080] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.374721][T10080] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.384447][T10080] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.393693][T10080] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.402700][T10080] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.411855][T10080] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.420949][T10080] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 351.430459][T10080] XFS (loop1): metadata I/O error in "xfs_read_agi+0x1ea/0x5a0" at daddr 0x2 len 1 error 117 [ 351.440933][T10080] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 351.452984][T10080] XFS (loop1): Failed to read root inode 0xd88, error 117 08:57:49 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:57:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x416c, 0x1}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() getpid() ptrace$peek(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x0) r2 = epoll_create1(0x0) capget(&(0x7f0000000040), &(0x7f0000000100)={0xffff, 0x4, 0x10001, 0x2, 0x8c35, 0x3f}) r3 = getpid() ptrace$getsig(0x4202, r3, 0x1, &(0x7f0000000140)) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000280)={0x4000201f, 0x3f000002}) r5 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105000, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x417) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000000)={r9, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={r9, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r9, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000240)=0x10) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) close(r4) mkdir(0x0, 0x0) 08:57:49 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14001, 0xffffffffffffe68a, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'security\x00'}, &(0x7f00000002c0)=0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="21578e453c30b13b70e43b06e551a87ebe5daa76d9fd28d65ebc647eb2d9490a156faf0eb91edac65c7cf5780a9c8bbea467e324e7ccc6f73e736db9c858867848bd3f54ef101167030169720ab486f3b98a0140f20887b4c4b1127a70dce67e70f8d9c1eb1b20890dd2b1edb6f116c36470ba6e295535b4214a268a8696060a7698faa490a92606f6c5e2d411febc86f7950b85976258e27fc191b77e067e36dad99117e8b9a7ffc768f2b7fedab6e00dfb79da0b0089b6503f56a286758245a151d0bc12552e764ecec5378a5f551a1adcacbdfb2fe39be95033df65a9c81a", @ANYRES32, @ANYRES32=r0, @ANYRES16=r1], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xfffffffd, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0d092d38f0ffff0d7b06eecadebbc5ee2d62841b16ff780c0000ffffffff9500000000004000a0aebd8208018fc355afaa5486d54415c91b5e2b8fbea8954f11f210c85dfa9a6b70a41c703a0999f2fd0952403067cfc3d271dfc7523a069d23704637dba9140a5fe0ce554ddef5e4e03379735c8286a01a5323c3000100000000000082819bef2cb4c2aafb918068abeb6fae6aa4d37a70816c4a92baef7a8da7c1"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000001c0)={0x101, 0x9, 0x4, 0xc7, &(0x7f0000000000)=""/199, 0x1e, &(0x7f0000000180)=""/30, 0xa2, &(0x7f0000000300)=""/162}) 08:57:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:49 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 351.885672][T10132] IPVS: ftp: loaded support on port[0] = 21 08:57:49 executing program 1: socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair(0x1f, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x108804, &(0x7f0000000200)={[{@index_on='index=on'}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off='xino=off'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@xino_on='xino=on'}, {@nfs_export_on='nfs_export=on'}, {@nfs_export_on='nfs_export=on'}, {@xino_on='xino=on'}], [{@fowner_lt={'fowner<'}}]}) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) r9 = dup3(r4, r6, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8649e3c08348d3fa15a7e6fd5695685222970c02fc43002ea95bfb52228b7212557e0834f", @ANYRES16=r11, @ANYBLOB="050300000000000000000400000004000180"], 0x18}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket(0x23, 0x800, 0x2) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r18, @ANYBLOB="0000000000000000280012000c000100766574680000000018000a00fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259fba61afe472b5ae6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r18}]}, 0x44}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_MASTER={0x8, 0xa, r14}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r11, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x54040}, 0x40) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r19 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) ftruncate(r19, 0x200004) sendfile(r0, r19, 0x0, 0x80001d00c0d0) 08:57:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) accept4$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x200000) syz_open_dev$amidi(&(0x7f0000001200)='/dev/amidi#\x00', 0x131, 0xf4080) pread64(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001300)="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") perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000001280), &(0x7f00000012c0)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000001240)=0x90, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000001480)={0x9c0000, 0x90, 0x2, r1, 0x0, &(0x7f0000001440)={0xa10908, 0x9, [], @string=&(0x7f0000001400)}}) write(r4, &(0x7f00000014c0)="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", 0xfe) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000004000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 08:57:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 352.416698][T10158] loop2: p2 < > p3 p4 [ 352.428141][T10158] loop2: p3 size 1912633224 extends beyond EOD, truncated [ 352.443842][T10158] loop2: p4 size 3657465856 extends beyond EOD, truncated 08:57:50 executing program 2: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = semget(0x0, 0x4, 0x191) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000140)=""/230) 08:57:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:57:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:50 executing program 2: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = semget(0x0, 0x4, 0x191) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000140)=""/230) [ 352.814524][T10142] IPVS: ftp: loaded support on port[0] = 21 [ 353.114654][ T27] audit: type=1800 audit(1583571470.982:34): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16613 res=0 [ 353.441351][T10148] syz-executor.1 (10148) used greatest stack depth: 22704 bytes left 08:57:52 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getpeername$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 08:57:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:57:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) [ 355.663446][ T9588] tipc: TX() has been purged, node left! [ 360.414361][ T0] NOHZ: local_softirq_pending 08 08:58:00 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:00 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) write$binfmt_elf64(r6, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0xf5, 0x25, 0x3, 0x80, 0xfffffffffffffff7, 0x3, 0x3, 0x2, 0x1, 0x40, 0x20e, 0x6fd, 0x4, 0x38, 0x2, 0x1, 0x6, 0x1000}, [{0x6474e551, 0xffffffff, 0x977, 0x3, 0x9, 0x3, 0x3f, 0x1f3}, {0x1, 0xa5, 0x987a, 0x1, 0xfffffffffffffffc, 0xffffffff, 0x1, 0x10000}], "800d49a659f8f8e8d30db1b6b8aa6121febfdd2920698e0b9c701eb92b4d51f00c5fb1dd6ff5ce9f8a34a89ac26158a976215281e75f1e191d0bab9cf106b6121280d40c6fa3d3a6f2b22956c8923efd1760a7fe7bf59b5aaaf2a912bcdd3a08e16f4ddd1fe6e7e57cfc29a05a55b23868274a9f19de3fb1015b788ea8650ab2113971885d2a45280835945d7036e6f1d34902c16e8dcb0bd33f", [[], [], [], []]}, 0x54a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000300)={0x2, 0x3, 0xfffffff9, 0x3}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid'}}]}}) 08:58:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000080)=""/248, &(0x7f0000000000)=0xf8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioprio_set$pid(0x1, 0x0, 0x7e35) clone(0x20008579, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:58:00 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:00 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:00 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:00 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3424}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f320f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c4e21903a05d000000c7442406000000000f011424f30f090f013a360f06c4c141f683b0a2e5a666baa100ed", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x418102, 0x0) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000840)=0x8) 08:58:00 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:10 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x25575d94af44d809, 0x0, 0x0, 0x8, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') fchmodat(0xffffffffffffff9c, 0x0, 0xe7ec6e3857c4761b) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="0800000003a5000095002b0000408000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x2be, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r4 = pidfd_open(r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) splice(r7, 0x0, r4, 0x0, 0xb4, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r8, &(0x7f0000000100), 0x107) write$UHID_INPUT(r8, &(0x7f0000005400), 0x1006) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r9, 0x84, 0x7f, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 08:58:10 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800b00010062726964676500004800028005002900000000000c0021000000000000000000080004000000000008001d0000ff000005002a000000000005002c000000000005001800000000000500160032480000"], 0x78}}, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') memfd_create(&(0x7f0000000040)='\x00', 0x1) 08:58:10 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) [ 372.658695][T10294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:58:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080)='fuse\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=0x50) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0xe, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd24f24b3ac273c81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a4fa21e76fc4d05e107ac82d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d08b26f5521b1ac0543978e05e200f2ef4214efd76167e74735bfeb92974cfcaadd589f252c8b00b693479bfe5d85dc391a000000000000000000"], 0x9d) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)=""/19, &(0x7f00000001c0)=0x13) accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 08:58:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) readahead(r0, 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f00700000000000000c1000000000000000020d105000000000000000000000000f7"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="000100000000000028e9ecbc935736920012800a00010076786c616e0000001800028014000500000000b6a19c324dec3fab0ebbc757c7bc7f458168a5d5a12af6f4cebbba3a6b286cc70230251b0cfaec50864c69e23dabdda2e67dff7f7d06c8d9f9a743e6f134", @ANYRES32, @ANYBLOB="c579328302df8c64daa4af8c854a68707819aac25a7297d728977b334d47c1da72062dc993c3373540ece40c3453dc0ed99932672e45544f22f46b3eaab35cbc5fdc5e1ac097e42d9395ec2974cfc8ac2a08742b7e59cf777801865f286c7daeb17a7bcf0e13eccd4de43201e109ad47d547619df5976b39735964d3d165b53a7e5a042038012d614f1341c5d369587a43c714ba73d8"], 0x5}}, 0x0) [ 380.243850][ T0] NOHZ: local_softirq_pending 08 08:58:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) 08:58:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x81, 0x4}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000240)={0x0, 'veth1_to_batadv\x00'}) connect(r1, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x6, @loopback, 0xfffffbff, 0x2}, 0x80) 08:58:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x44038, 0x8000, 0x0, 0x6, 0x0, 0x10000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x4000df) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1200, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0x5fd, 0x2, 0x9, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0xa0001) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000000240)) 08:58:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:21 executing program 1: semget(0x1, 0x0, 0x160) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x6581d2e708695e31, 0x13, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) ioprio_set$pid(0x1, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) pipe(0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x417) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000000)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={r7, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="a3000000966bd8d69550750a7a9f045dd4cec977222d589905110939d1f7d5e1ab253829326557325c4cfd3a29f035ecc9e8b27fce0b445c78d353f80b755acefc69cbdc22704b727ed66a8d0ebe743637c37ff537493a1ad5644fb41e135ef2581a890f9be96dc6f9055b5a3b3b04e2c07be8697c5ecf30dc5554da314598fc03f5b8fd0b15901802894eafe9ae81e93a33676123f990f882c8e63a7d4d6d97e950c773c49d35"], &(0x7f0000000340)=0xab) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e23, @local}}, 0x6a1, 0x5, 0x8, 0x1c, 0x5}, &(0x7f0000000480)=0x98) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000240)={0x980000, 0x4, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9d0901, 0x4, [], @value=0xfff}}) r9 = gettid() tkill(r9, 0x36) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcbf, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x6, 0x0, 0x4, 0x2000000000, 0x10000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) sendmsg$netlink(r12, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) 08:58:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20048091) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = socket$inet(0x10, 0x80003, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x117540, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000001c0)={0x1cdb, 0x1, 0x40, 0x3, 0x9}, 0xc) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x42402, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000000c0)='userwlan0\x00', &(0x7f0000000100)='./file0\x00', r5) sendmsg(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff14, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000200000a1f000003141108000800100012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) 08:58:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x18, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000014) 08:58:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 383.731687][ T27] audit: type=1800 audit(1583571501.592:35): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16680 res=0 08:58:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x401, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x417) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x1ff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0x74000000) 08:58:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:22 executing program 1: semget(0x1, 0x0, 0x160) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x6581d2e708695e31, 0x13, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) ioprio_set$pid(0x1, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) pipe(0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x417) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000000)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={r7, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="a3000000966bd8d69550750a7a9f045dd4cec977222d589905110939d1f7d5e1ab253829326557325c4cfd3a29f035ecc9e8b27fce0b445c78d353f80b755acefc69cbdc22704b727ed66a8d0ebe743637c37ff537493a1ad5644fb41e135ef2581a890f9be96dc6f9055b5a3b3b04e2c07be8697c5ecf30dc5554da314598fc03f5b8fd0b15901802894eafe9ae81e93a33676123f990f882c8e63a7d4d6d97e950c773c49d35"], &(0x7f0000000340)=0xab) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e23, @local}}, 0x6a1, 0x5, 0x8, 0x1c, 0x5}, &(0x7f0000000480)=0x98) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000240)={0x980000, 0x4, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9d0901, 0x4, [], @value=0xfff}}) r9 = gettid() tkill(r9, 0x36) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcbf, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x6, 0x0, 0x4, 0x2000000000, 0x10000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) sendmsg$netlink(r12, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) 08:58:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:22 executing program 1: semget(0x1, 0x0, 0x160) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x6581d2e708695e31, 0x13, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) ioprio_set$pid(0x1, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) pipe(0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x417) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000000)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={r7, 0x1ff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="a3000000966bd8d69550750a7a9f045dd4cec977222d589905110939d1f7d5e1ab253829326557325c4cfd3a29f035ecc9e8b27fce0b445c78d353f80b755acefc69cbdc22704b727ed66a8d0ebe743637c37ff537493a1ad5644fb41e135ef2581a890f9be96dc6f9055b5a3b3b04e2c07be8697c5ecf30dc5554da314598fc03f5b8fd0b15901802894eafe9ae81e93a33676123f990f882c8e63a7d4d6d97e950c773c49d35"], &(0x7f0000000340)=0xab) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e23, @local}}, 0x6a1, 0x5, 0x8, 0x1c, 0x5}, &(0x7f0000000480)=0x98) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000240)={0x980000, 0x4, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9d0901, 0x4, [], @value=0xfff}}) r9 = gettid() tkill(r9, 0x36) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcbf, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x6, 0x0, 0x4, 0x2000000000, 0x10000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) sendmsg$netlink(r12, &(0x7f0000028fc8)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) 08:58:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:22 executing program 5: setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000140), 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) dup3(r0, r2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, 0x0, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000180)={@remote}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20000, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) 08:58:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6a, 0x208801) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:23 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:24 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r1) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="48a2a60010000507800000f70000000000000000cde0b9a089a3f551891a382020f18f616482943e9d49e2898ebe788eb25ff6dddc9b08b6d56abb8caaf2252e0000000000009ae593235870c927ff898da866a0e3a8cd752347e23061eb012087ff7572475cd336aaf171030d7e69a7e108123614afac794a6cb8e687b03ffce55e9d22f2b10e9454b977438ec7449b0471d232bd14d2641f922ad1acfa0dae112abd72c666e2f3aa0e335b75d8ddd0505e46f0b85503bf99b5fdbf5d75", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000a00fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259fba61afe472b5ae6d4bd05772981", @ANYRESHEX=r9, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x5}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r12, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12}, 0x78) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x500040e}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x24000810) r14 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r14}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) read(r2, &(0x7f00000000c0)=""/131, 0x83) r15 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r15, 0x402, 0x0) 08:58:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 386.598138][T10571] bond0: (slave netdevsim2): slave is up - this may be due to an out of date ifenslave 08:58:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:24 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:24 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 387.034357][T10567] bond0: (slave netdevsim2): slave is up - this may be due to an out of date ifenslave 08:58:24 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:25 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:25 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:25 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 08:58:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:25 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 08:58:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:26 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 08:58:26 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 08:58:26 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:26 executing program 1: sched_setscheduler(0x0, 0x5, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ptrace$getenv(0x4201, r4, 0xba, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x6, 0xa81) r5 = socket(0x1000000010, 0x80003, 0x0) write(r5, &(0x7f0000000000)="220000002100070777d0000009000701", 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xfffffffd, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[], &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r11) stat(&(0x7f00000004c0)='./file0\x00', 0x0) r12 = socket$alg(0x26, 0x5, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(r12, 0x0, r13) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) openat$cgroup_type(r8, &(0x7f0000000880)='cgroup.type\x00', 0x2, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r15) r17 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r15}, @map={0x18, 0x0, 0x1, 0x0, r16}, @map={0x18, 0x0, 0x1, 0x0, r17}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) dup3(r17, r1, 0x80000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010002000000000002000400fa0e7dbf865192dc63ec8e294b90ce97b74a60d769ee5c39c59bc8d006a858e5b99d64", @ANYRES32, @ANYBLOB="1f70a76423fcf6c60b5a5b003bfbf690717cce1f5f05be47badef20806f31295410c76d9de513b4920f43eb40e1b62984eeaf42410c30e4c86328aa7d6909e26e131a8f8595ad5f0f4fb4546c9fe704037b6964c5d7afb170cc936c756799177a829e7882cefa82dc2c9bf1d", @ANYRESDEC=0x0, @ANYBLOB="5604cd1426155d63d7756d98b133e8b3d7a95f8c2c33241bf9c27ea8caf33a6fd2f40a9995abe1afafbabb6044b92943a3", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="3a3d3c3ec3d203c54ae2eac5c6a6415651ac0bed439bf4807bc70ec7dd4ef28df5b3ba3b40e14b85dd04c554d2e2c189f80fdd57fed5e7593f238805c8127a3d501db129591f000956e742048ce959bd59f17e80ca046a9e9486d66aa3f90815ac5ebafff674bd20c40bb899ddc320622d6af4b629d26f16cce5dda5c05c6e98ae5e534639e07c833291f6fd848d1d46322d4258046826505ff39c6e2daff216e78a1374", @ANYBLOB="f2ffd4db8fe635aa9754a911d54f", @ANYRES32, @ANYRES32, @ANYBLOB='H', @ANYRES32=r11, @ANYBLOB="5c1f5b712d7f4aac9607000000", @ANYBLOB, @ANYPTR64, @ANYRES32, @ANYRESOCT=r14], 0x14, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x20000102000007) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@empty, 0x2c}) socket(0x0, 0x0, 0x5) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) memfd_create(0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1e, 0x10, 0xffffffffffffffff, 0x0) 08:58:26 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:26 executing program 4 (fault-call:6 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 388.717685][T10675] FAULT_INJECTION: forcing a failure. [ 388.717685][T10675] name failslab, interval 1, probability 0, space 0, times 1 08:58:26 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 388.843203][T10675] CPU: 1 PID: 10675 Comm: syz-executor.4 Not tainted 5.6.0-rc3-syzkaller #0 [ 388.851922][T10675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.861979][T10675] Call Trace: [ 388.865430][T10675] dump_stack+0x188/0x20d [ 388.869838][T10675] should_fail.cold+0x5/0xa [ 388.874381][T10675] ? fault_create_debugfs_attr+0x140/0x140 [ 388.880276][T10675] should_failslab+0x5/0xf [ 388.884779][T10675] kmem_cache_alloc_node+0x25c/0x760 [ 388.890126][T10675] ? __lock_acquire+0x80b/0x3ca0 [ 388.895085][T10675] ? noop_count+0x40/0x40 [ 388.899501][T10675] __alloc_skb+0xba/0x5a0 [ 388.903851][T10675] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 388.909402][T10675] ? mark_lock+0xbc/0x1220 [ 388.913837][T10675] alloc_skb_with_frags+0x92/0x560 [ 388.919036][T10675] sock_alloc_send_pskb+0x734/0x890 [ 388.924250][T10675] ? mark_held_locks+0xe0/0xe0 [ 388.929037][T10675] ? sock_wmalloc+0x120/0x120 [ 388.933769][T10675] ? lock_acquire+0x197/0x420 [ 388.938455][T10675] ? mark_held_locks+0x9f/0xe0 [ 388.943286][T10675] ? __local_bh_enable_ip+0x159/0x270 [ 388.948787][T10675] ? hci_send_to_channel+0x50/0x50 [ 388.953905][T10675] hci_sock_sendmsg+0xeda/0x2020 [ 388.958860][T10675] ? hci_send_to_channel+0x50/0x50 [ 388.963983][T10675] ? hci_send_to_channel+0x50/0x50 [ 388.969099][T10675] sock_sendmsg+0xcf/0x120 [ 388.973531][T10675] sock_write_iter+0x283/0x3c0 [ 388.978293][T10675] ? sock_sendmsg+0x120/0x120 [ 388.982982][T10675] ? find_held_lock+0x2d/0x110 [ 388.987875][T10675] ? __fget_files+0x307/0x4f0 [ 388.992593][T10675] new_sync_write+0x49c/0x700 [ 388.997275][T10675] ? new_sync_read+0x790/0x790 [ 389.002110][T10675] ? apparmor_path_rmdir+0x30/0x30 [ 389.007297][T10675] ? security_file_permission+0x8a/0x370 [ 389.012933][T10675] __vfs_write+0xc9/0x100 [ 389.017305][T10675] vfs_write+0x262/0x5c0 [ 389.021593][T10675] ksys_write+0x1e8/0x250 [ 389.025949][T10675] ? __ia32_sys_read+0xb0/0xb0 [ 389.030869][T10675] ? __ia32_sys_clock_settime+0x260/0x260 [ 389.036663][T10675] ? trace_hardirqs_off_caller+0x55/0x230 [ 389.042413][T10675] do_syscall_64+0xf6/0x790 [ 389.047001][T10675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.052895][T10675] RIP: 0033:0x45c4a9 [ 389.056786][T10675] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.076387][T10675] RSP: 002b:00007fdc9ac55c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 389.084794][T10675] RAX: ffffffffffffffda RBX: 00007fdc9ac566d4 RCX: 000000000045c4a9 [ 389.092759][T10675] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000005 [ 389.100722][T10675] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.108685][T10675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 389.116646][T10675] R13: 0000000000000cc0 R14: 00000000004cea9e R15: 0000000000000000 08:58:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:27 executing program 4 (fault-call:6 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:27 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 389.425099][T10692] FAULT_INJECTION: forcing a failure. [ 389.425099][T10692] name failslab, interval 1, probability 0, space 0, times 0 [ 389.443235][T10692] CPU: 0 PID: 10692 Comm: syz-executor.4 Not tainted 5.6.0-rc3-syzkaller #0 [ 389.451937][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.462127][T10692] Call Trace: [ 389.465440][T10692] dump_stack+0x188/0x20d [ 389.469793][T10692] should_fail.cold+0x5/0xa [ 389.474315][T10692] ? fault_create_debugfs_attr+0x140/0x140 [ 389.480143][T10692] should_failslab+0x5/0xf [ 389.484564][T10692] kmem_cache_alloc_node_trace+0x27c/0x790 [ 389.490436][T10692] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 389.496442][T10692] __kmalloc_node_track_caller+0x38/0x60 [ 389.502084][T10692] __kmalloc_reserve.isra.0+0x39/0xe0 [ 389.507467][T10692] __alloc_skb+0xef/0x5a0 [ 389.511808][T10692] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 389.517353][T10692] ? mark_lock+0xbc/0x1220 [ 389.521784][T10692] alloc_skb_with_frags+0x92/0x560 [ 389.526914][T10692] sock_alloc_send_pskb+0x734/0x890 [ 389.532123][T10692] ? mark_held_locks+0xe0/0xe0 [ 389.536919][T10692] ? sock_wmalloc+0x120/0x120 [ 389.541614][T10692] ? lock_acquire+0x197/0x420 [ 389.546304][T10692] ? mark_held_locks+0x9f/0xe0 [ 389.551074][T10692] ? __local_bh_enable_ip+0x159/0x270 [ 389.556467][T10692] ? hci_send_to_channel+0x50/0x50 [ 389.561587][T10692] hci_sock_sendmsg+0xeda/0x2020 [ 389.566547][T10692] ? hci_send_to_channel+0x50/0x50 [ 389.571675][T10692] ? hci_send_to_channel+0x50/0x50 [ 389.576803][T10692] sock_sendmsg+0xcf/0x120 [ 389.581226][T10692] sock_write_iter+0x283/0x3c0 [ 389.585998][T10692] ? sock_sendmsg+0x120/0x120 [ 389.590700][T10692] ? find_held_lock+0x2d/0x110 [ 389.595476][T10692] ? __fget_files+0x307/0x4f0 [ 389.600166][T10692] new_sync_write+0x49c/0x700 [ 389.604857][T10692] ? new_sync_read+0x790/0x790 [ 389.609638][T10692] ? apparmor_path_rmdir+0x30/0x30 [ 389.614777][T10692] ? security_file_permission+0x8a/0x370 [ 389.620422][T10692] __vfs_write+0xc9/0x100 [ 389.624773][T10692] vfs_write+0x262/0x5c0 [ 389.629044][T10692] ksys_write+0x1e8/0x250 [ 389.633393][T10692] ? __ia32_sys_read+0xb0/0xb0 [ 389.638159][T10692] ? __ia32_sys_clock_settime+0x260/0x260 [ 389.643886][T10692] ? trace_hardirqs_off_caller+0x55/0x230 [ 389.649624][T10692] do_syscall_64+0xf6/0x790 [ 389.654145][T10692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.660043][T10692] RIP: 0033:0x45c4a9 08:58:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 389.663942][T10692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.683634][T10692] RSP: 002b:00007fdc9ac55c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 389.692052][T10692] RAX: ffffffffffffffda RBX: 00007fdc9ac566d4 RCX: 000000000045c4a9 [ 389.700024][T10692] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000005 [ 389.707996][T10692] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.716734][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 08:58:27 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) [ 389.716754][T10692] R13: 0000000000000cc0 R14: 00000000004cea9e R15: 0000000000000001 08:58:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:29 executing program 4 (fault-call:6 fault-nth:2): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000a00fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259fba61afe472b5ae6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', r9}) sendmmsg$inet(r1, &(0x7f0000002380)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="b941d5b1fc64ad", 0x7}, {&(0x7f0000000280)="e923792a160e53e48e63dc62fcf6ca82d9aff29fe384a8401eed6663199beabb5043869c5946dd2b7275a05f9be40f9443f5d1d532478f6d594122eb9fdfbb356a48702f5306237245fa4bd37e70c49b695e7acf88af5c246db23e60c2186da43d99b68c8476bb495831c1bcbad9157690", 0x71}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="e6f2db62597bb899d91fb7a998974c8e1898a086e4", 0x15}, {&(0x7f0000000540)="653ca8b3ec83d106eefa3b8b80b5780244d9ffef464b191af19b1b755bb4e89b925b11631577055357d2b3102f2242bec0aab90ce542639cb2125275a6321bf3dbb5205ecb50401ceb588bad052b1ac5eb970b198bd8aaedbae3743e00a52e52a53a45399efd723217361e28011a1bddbd17b03f9e9ab6f55d804c2e369506ede6f60e6b7744b972c98b2754096c3904b418aadd41b10ff02afe9dbfde2ec6d36c71", 0xa2}], 0x2}}, {{&(0x7f0000000640)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000680)="3f0f44eae405f22c68e5d0f758a85ed8530cfbcbbb0d56f42b981d271974fe19f6ed2a54620418e1bd5eaa1fc40aa3518780ef03d0298b46a6c17c7da825ea5db1d6970d0bb412f81dea55a5c6c4b70f09c3dce3ffd963208ccd4b979ad77358db99615016aceffcf75691cdafc1da756a21c268efbb8be41d55d35b6c2014700dd90be382d19d0044c6f5d3b25e8d4111b1d0b6b3709c25dd436a18811bc4542e83ef97028dfd9cf6830eb3beb389224214fc80c858d7f4f1f197edc50fe357bf38393e3e78cb85bd6e570093d3aeba9b636e0570e1d8bfe649ffdcab3de9d8345674e86052", 0xe6}], 0x1, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38}}, {{&(0x7f0000000880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000008c0)="51dd9184defb538cea9e78", 0xb}, {&(0x7f0000000900)="e9a6fae9b6efa6398d1d4cc63d265fab383b71fb76fac7a0f0ed20363130475ca974128cc8a599b1ca3476f570ccdb4a883d721aac114307e0", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="c7a77f84b282a332b5e7760b67c649fb513298d27b0f892aa88207064c7032869b1caabdb8ed5f8c1f417726e29796f28755d5d8ce9030ede98709be8fb904a41005d1d69ce5c95accd9a4243eb86fb16863eb330654070ff21967b60bd0675c80fc39753fca5499642f85c00c1109a12063bc8de04414", 0x77}], 0x1, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @multicast1}}}], 0x20}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b40)="7d12357db719d1752e7b800949e8c2512d316cde3c4493b842333c47f2dbcf24ea700e1e16b43ddab177683c7b870f9a7e1139292ac1a830a72ab097347565eb20c6f3ea84aad74d1637c892aa3da6d082c4c3afa5158085b63af3c52795ee60759a4f20b2d079e92264d1904c215f718621035c4d22a354b0e97f789e4beaf870ffc50ac5153abaa1d85dbbbac3557b75876f7184b3c230975207d4cec4a3cfa013c9423a83c4173246", 0xaa}, {&(0x7f0000000c00)="3d54fb971b2c913dac71a15cea1e04ce85c57e8ccf603bc9c712acaa0b80acd11be043e5c0e5f47dc0554b1fe04decb014b13b89fe0ef7ef2bcc7661fbb7b053d5c4e0df173deb21e0f13e0d7a9c11f3f0466277eabdfdeba30beb3485e00ff3682cd49c2b5df91940c3d61ae8b6d446703b7aae9fa03c21985267b7314d050454b6d57e45c8bcfda0d010713f911feef24864d730fc52e00419fdef0325c21e56ba311ad4e6d9815ae4164463d7cac30250cc0fbdc4", 0xb6}, {&(0x7f0000000cc0)="20f774703f4306ad6200032bb527dd30c8722a31e3ba63d5a21af19e38b5ab4de05b76ab6ca1c275c087c8046063fd9b349a60c7a5a7d6c2d14fabb25bab86d8b14d3425d4c17494093832329cdf4c21b0501d845232d9b465e44748266ed813a65b876bf5e51eb360dbd0e13f528b30ef94c250f768ba061a673a600776d51329a71e202d26bf8777e38ac7b1e0f2f542e00c8689c2ba6e638b124ad298aac48cfe62b702227040d30f980381abd4381e7b9aca7318d8e2c7490ba28d008c868c473db6cc6a12ad9fb55e2b52e84519e2d990d1913c72cce7e7b6f45714a460d2b64d80ae3e2c70347a9911f07f0c64923857c80a7c", 0xf6}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="519df352cf1392c56d21b285537dfd7c9b009efbae632bb0b7321fd5d14d70124acbdc1b0a7ae9926e5f427370202b2ac86377547e87852742a1172761e04ebbeee50ed5e84ad2285950e57c935314", 0x4f}], 0x5}}, {{&(0x7f0000000f00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000f40)="d382534fafc50ad2b4ef159e543925eb054aa473917b67564507e4933109abd1da96eb0567c6ea906d1f0cb12b0f8190eea9d28b2a9844c1fa26f4fbea625618f7530aeb63b60c7427afc240000f6afaa63edc10451b65e8e880bbd0a735bf60dff83f4a73e7e4c9861b774433b926ad09f1970bc1e1d2ab288ba37d7fc3", 0x7e}, {&(0x7f0000000fc0)="6d234114129043d44781e51136acc7fef4df78f5969fdf31e991a22f72d3ab64570edb231750c7bd38d8fee44a6c9d64a1496adeb729eafc4999b392eeff021d9eb9bd99f062669479b6bb87d5ab4f9338cf476cad2b7cb97bb25c528bd74751287ca96790516d8aabe961f7d2597bb53595703ff2eb2daeaaf31d523549a210d9c9caf6e1ffd2d7c66bf0a8b964f8aa89a9307f7837340498aa7974f753168a3e0050c171d6dd01b1a9a709f19173d53bf9e9", 0xb3}, {&(0x7f0000001080)="4a5812c7e273fc5f2d4249555864dbe579e6cee7698ff39b894a9332560c13062af979e29cf466f4b142ccacb423eb76ed54dd66da84081090411e4bca7b637ba7197d83314a4e20600e11686d1fea89f1cc55b16304f7a773f0654d153757f2", 0x60}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="ff4f72a5271dc3eb17ac114957c56d0e526271303ddbdd26251d99e7b18c0c2f116375dee2797c7a35953eee129fb2fb0ed06dbfb4ad05ad97df7a473b5e3b205bcc752e013a4fd7603c6dbf0c89b95f673cb54aafba36b864412ce118496099bb259d8e1e52af6e975595db7d00585eaf2ce0a178d958f1f2280f664b2ec88b2265cd98d90d6cf4269f32938d0e4cc500f0ada1d9b2eb4bb1b4ade35bc68f2584298067c88410560277ae1ab7afc2d0f22cc8faf09b42e0c7aacdcbb9", 0xbd}, {&(0x7f00000021c0)="5e3dad308fd88ccd7692a464ccf15784ba9db069860279d27ce35d", 0x1b}, {&(0x7f0000002200)="1d6199ccc710cb24868f3fd4a42e5868686bb12adfb1927862c992ce4bff6049906039f0a95e4a23537a563be9a64e2c24e6af25f667f427374968c1bcb23979bd9a78e970cbfb69d6240b5d95887091b12fc814a36e8b1efd9fb89d70251826c4bc6d968cfb6ac0ad7869f4eb72a2201a1e13faef7fe1d1cde2598f60dd31d1c85c6e4ab35da0ed80df431511aad7980f7099a98168ced8f83ce230e2", 0x9d}], 0x7, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}], 0x7, 0x4000800) fcntl$getown(0xffffffffffffffff, 0x9) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r13}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r15, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r15}, 0x78) bind(r14, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r15, {0x2, 0x4e23, @multicast2}, 0x2, 0x3, 0x2, 0x2}}, 0x80) 08:58:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:29 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 391.875989][T10720] bond0: (slave veth5): Enslaving as an active interface with an up link 08:58:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:29 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) [ 392.044871][T10720] syz-executor.1 (10720) used greatest stack depth: 22208 bytes left 08:58:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:32 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000a00fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259fba61afe472b5ae6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', r9}) sendmmsg$inet(r1, &(0x7f0000002380)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="b941d5b1fc64ad", 0x7}, {&(0x7f0000000280)="e923792a160e53e48e63dc62fcf6ca82d9aff29fe384a8401eed6663199beabb5043869c5946dd2b7275a05f9be40f9443f5d1d532478f6d594122eb9fdfbb356a48702f5306237245fa4bd37e70c49b695e7acf88af5c246db23e60c2186da43d99b68c8476bb495831c1bcbad9157690", 0x71}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="e6f2db62597bb899d91fb7a998974c8e1898a086e4", 0x15}, {&(0x7f0000000540)="653ca8b3ec83d106eefa3b8b80b5780244d9ffef464b191af19b1b755bb4e89b925b11631577055357d2b3102f2242bec0aab90ce542639cb2125275a6321bf3dbb5205ecb50401ceb588bad052b1ac5eb970b198bd8aaedbae3743e00a52e52a53a45399efd723217361e28011a1bddbd17b03f9e9ab6f55d804c2e369506ede6f60e6b7744b972c98b2754096c3904b418aadd41b10ff02afe9dbfde2ec6d36c71", 0xa2}], 0x2}}, {{&(0x7f0000000640)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000680)="3f0f44eae405f22c68e5d0f758a85ed8530cfbcbbb0d56f42b981d271974fe19f6ed2a54620418e1bd5eaa1fc40aa3518780ef03d0298b46a6c17c7da825ea5db1d6970d0bb412f81dea55a5c6c4b70f09c3dce3ffd963208ccd4b979ad77358db99615016aceffcf75691cdafc1da756a21c268efbb8be41d55d35b6c2014700dd90be382d19d0044c6f5d3b25e8d4111b1d0b6b3709c25dd436a18811bc4542e83ef97028dfd9cf6830eb3beb389224214fc80c858d7f4f1f197edc50fe357bf38393e3e78cb85bd6e570093d3aeba9b636e0570e1d8bfe649ffdcab3de9d8345674e86052", 0xe6}], 0x1, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38}}, {{&(0x7f0000000880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000008c0)="51dd9184defb538cea9e78", 0xb}, {&(0x7f0000000900)="e9a6fae9b6efa6398d1d4cc63d265fab383b71fb76fac7a0f0ed20363130475ca974128cc8a599b1ca3476f570ccdb4a883d721aac114307e0", 0x39}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="c7a77f84b282a332b5e7760b67c649fb513298d27b0f892aa88207064c7032869b1caabdb8ed5f8c1f417726e29796f28755d5d8ce9030ede98709be8fb904a41005d1d69ce5c95accd9a4243eb86fb16863eb330654070ff21967b60bd0675c80fc39753fca5499642f85c00c1109a12063bc8de04414", 0x77}], 0x1, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @multicast1}}}], 0x20}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b40)="7d12357db719d1752e7b800949e8c2512d316cde3c4493b842333c47f2dbcf24ea700e1e16b43ddab177683c7b870f9a7e1139292ac1a830a72ab097347565eb20c6f3ea84aad74d1637c892aa3da6d082c4c3afa5158085b63af3c52795ee60759a4f20b2d079e92264d1904c215f718621035c4d22a354b0e97f789e4beaf870ffc50ac5153abaa1d85dbbbac3557b75876f7184b3c230975207d4cec4a3cfa013c9423a83c4173246", 0xaa}, {&(0x7f0000000c00)="3d54fb971b2c913dac71a15cea1e04ce85c57e8ccf603bc9c712acaa0b80acd11be043e5c0e5f47dc0554b1fe04decb014b13b89fe0ef7ef2bcc7661fbb7b053d5c4e0df173deb21e0f13e0d7a9c11f3f0466277eabdfdeba30beb3485e00ff3682cd49c2b5df91940c3d61ae8b6d446703b7aae9fa03c21985267b7314d050454b6d57e45c8bcfda0d010713f911feef24864d730fc52e00419fdef0325c21e56ba311ad4e6d9815ae4164463d7cac30250cc0fbdc4", 0xb6}, {&(0x7f0000000cc0)="20f774703f4306ad6200032bb527dd30c8722a31e3ba63d5a21af19e38b5ab4de05b76ab6ca1c275c087c8046063fd9b349a60c7a5a7d6c2d14fabb25bab86d8b14d3425d4c17494093832329cdf4c21b0501d845232d9b465e44748266ed813a65b876bf5e51eb360dbd0e13f528b30ef94c250f768ba061a673a600776d51329a71e202d26bf8777e38ac7b1e0f2f542e00c8689c2ba6e638b124ad298aac48cfe62b702227040d30f980381abd4381e7b9aca7318d8e2c7490ba28d008c868c473db6cc6a12ad9fb55e2b52e84519e2d990d1913c72cce7e7b6f45714a460d2b64d80ae3e2c70347a9911f07f0c64923857c80a7c", 0xf6}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="519df352cf1392c56d21b285537dfd7c9b009efbae632bb0b7321fd5d14d70124acbdc1b0a7ae9926e5f427370202b2ac86377547e87852742a1172761e04ebbeee50ed5e84ad2285950e57c935314", 0x4f}], 0x5}}, {{&(0x7f0000000f00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000f40)="d382534fafc50ad2b4ef159e543925eb054aa473917b67564507e4933109abd1da96eb0567c6ea906d1f0cb12b0f8190eea9d28b2a9844c1fa26f4fbea625618f7530aeb63b60c7427afc240000f6afaa63edc10451b65e8e880bbd0a735bf60dff83f4a73e7e4c9861b774433b926ad09f1970bc1e1d2ab288ba37d7fc3", 0x7e}, {&(0x7f0000000fc0)="6d234114129043d44781e51136acc7fef4df78f5969fdf31e991a22f72d3ab64570edb231750c7bd38d8fee44a6c9d64a1496adeb729eafc4999b392eeff021d9eb9bd99f062669479b6bb87d5ab4f9338cf476cad2b7cb97bb25c528bd74751287ca96790516d8aabe961f7d2597bb53595703ff2eb2daeaaf31d523549a210d9c9caf6e1ffd2d7c66bf0a8b964f8aa89a9307f7837340498aa7974f753168a3e0050c171d6dd01b1a9a709f19173d53bf9e9", 0xb3}, {&(0x7f0000001080)="4a5812c7e273fc5f2d4249555864dbe579e6cee7698ff39b894a9332560c13062af979e29cf466f4b142ccacb423eb76ed54dd66da84081090411e4bca7b637ba7197d83314a4e20600e11686d1fea89f1cc55b16304f7a773f0654d153757f2", 0x60}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="ff4f72a5271dc3eb17ac114957c56d0e526271303ddbdd26251d99e7b18c0c2f116375dee2797c7a35953eee129fb2fb0ed06dbfb4ad05ad97df7a473b5e3b205bcc752e013a4fd7603c6dbf0c89b95f673cb54aafba36b864412ce118496099bb259d8e1e52af6e975595db7d00585eaf2ce0a178d958f1f2280f664b2ec88b2265cd98d90d6cf4269f32938d0e4cc500f0ada1d9b2eb4bb1b4ade35bc68f2584298067c88410560277ae1ab7afc2d0f22cc8faf09b42e0c7aacdcbb9", 0xbd}, {&(0x7f00000021c0)="5e3dad308fd88ccd7692a464ccf15784ba9db069860279d27ce35d", 0x1b}, {&(0x7f0000002200)="1d6199ccc710cb24868f3fd4a42e5868686bb12adfb1927862c992ce4bff6049906039f0a95e4a23537a563be9a64e2c24e6af25f667f427374968c1bcb23979bd9a78e970cbfb69d6240b5d95887091b12fc814a36e8b1efd9fb89d70251826c4bc6d968cfb6ac0ad7869f4eb72a2201a1e13faef7fe1d1cde2598f60dd31d1c85c6e4ab35da0ed80df431511aad7980f7099a98168ced8f83ce230e2", 0x9d}], 0x7, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}], 0x7, 0x4000800) fcntl$getown(0xffffffffffffffff, 0x9) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r13}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r15, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r15}, 0x78) bind(r14, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r15, {0x2, 0x4e23, @multicast2}, 0x2, 0x3, 0x2, 0x2}}, 0x80) 08:58:32 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa02}, 0x10) 08:58:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:32 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001480)={0x7, 0x0, 0x1, 0xc3}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000014c0)={r1, 0x81}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000280)=0x2, 0x144) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) sendmmsg(r2, &(0x7f0000001400)=[{{&(0x7f0000000040)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a018f27b5b305938a9ec7994d064478fc69ac8deb5b40d71997078cfea4377e821fcf12d79dea6469893c2b6a9970a8a7c74a74e9e9496dbcd6e0832f12973f3101c71f3da3c7862607a5cdc9c6483a268c43e7d7a8575e838c11f1db8e4ae8167cff338ba14e993029fd2afaa8428075da1637ddb4b1f617c23db1702651cc9ed30258a0131ec1c697a7fc7fcf336b67f997831803a11b617b846565d5bafe12a9ca3c100c75f6b842d14285faa68f853ce9f7942d150bc614e715481cf09809ec0fa9c4279b4eb739ce94d9d4c507346bec394a9", 0xd5}, {&(0x7f00000002c0)="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", 0x1000}], 0x2}}, {{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x1, 0x1, {0xa, 0x4e20, 0x7fff, @mcast2, 0x2}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001340)="d78328c759adf400fd555aef7c81f56fc2634fe9f4296906bc95f3e566155655c07fcf6d78ec2211676f9637ff82ad1ed9018edd95565bff211db6f2b9cdc57674c20372551f767515b549ce4e244799a58cac797d5702ba3bad00958f3f4685a3e9c1d317eee03ae10a1717bad1c124a7b64148aa1b39990a17e240a8d6178f1e3135f4373df14c560829cb", 0x8c}], 0x1}}], 0x2, 0x0) 08:58:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:32 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa0f}, 0x10) 08:58:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001480)={0x7, 0x0, 0x1, 0xc3}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000014c0)={r1, 0x81}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000280)=0x2, 0x144) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) sendmmsg(r2, &(0x7f0000001400)=[{{&(0x7f0000000040)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a018f27b5b305938a9ec7994d064478fc69ac8deb5b40d71997078cfea4377e821fcf12d79dea6469893c2b6a9970a8a7c74a74e9e9496dbcd6e0832f12973f3101c71f3da3c7862607a5cdc9c6483a268c43e7d7a8575e838c11f1db8e4ae8167cff338ba14e993029fd2afaa8428075da1637ddb4b1f617c23db1702651cc9ed30258a0131ec1c697a7fc7fcf336b67f997831803a11b617b846565d5bafe12a9ca3c100c75f6b842d14285faa68f853ce9f7942d150bc614e715481cf09809ec0fa9c4279b4eb739ce94d9d4c507346bec394a9", 0xd5}, {&(0x7f00000002c0)="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", 0x1000}], 0x2}}, {{&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x1, 0x1, {0xa, 0x4e20, 0x7fff, @mcast2, 0x2}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001340)="d78328c759adf400fd555aef7c81f56fc2634fe9f4296906bc95f3e566155655c07fcf6d78ec2211676f9637ff82ad1ed9018edd95565bff211db6f2b9cdc57674c20372551f767515b549ce4e244799a58cac797d5702ba3bad00958f3f4685a3e9c1d317eee03ae10a1717bad1c124a7b64148aa1b39990a17e240a8d6178f1e3135f4373df14c560829cb", 0x8c}], 0x1}}], 0x2, 0x0) [ 394.974466][T10782] bond0: (slave veth7): Enslaving as an active interface with an up link 08:58:33 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa11}, 0x10) 08:58:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:35 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x109c41, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="080003000b00000008000300020000001c0016801800018014000a00"/44], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) 08:58:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:35 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) [ 397.815150][T10818] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 397.899368][T10825] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="95"]}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:36 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:36 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) 08:58:36 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:36 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) 08:58:36 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:36 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:36 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf00}}, 0x10) 08:58:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:37 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) [ 400.724369][ T0] NOHZ: local_softirq_pending 08 08:58:39 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:39 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1100}}, 0x10) 08:58:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:39 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x34000}}, 0x10) 08:58:40 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x400300}}, 0x10) 08:58:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:40 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:42 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:42 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:42 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1000000}}, 0x10) 08:58:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0xd22056442a37dd3e, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40400, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x2, 0x3}) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x6, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1c6, &(0x7f00000004c0)={@random="4b05d2e2c240", @dev, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "979c87", 0x0, 0x6, 0xfc, @rand_addr="ea60e8e504eb53bd1de317894aae0ae5", @ipv4={[], [], @broadcast}, {[], {{0x4e23, 0x4e22, r3, r4, 0x0, 0x0, 0x0, 0x40, 0x8001, 0x0, 0x2, {[@generic={0x13, 0x0, "2001010000d85a4f0000000000000000"}, @exp_smc, @exp_fastopen={0xfe, 0x0, 0xf989, "4fe6a0b5b500fe"}, @sack={0x5, 0x0, [0x10000, 0xffb, 0x7ff, 0xffffffc0, 0x8, 0x7, 0x10001]}, @nop, @sack_perm, @nop, @timestamp={0x8, 0x0, 0x3, 0x6cc}]}}, {"cff54a75520b887830bfe9a0fc439f084879cac42971e6a15e4b701593925d3544200c17753f9b27541f91b8f055f17e3ff5f7d18bbfd282d17f7ec67dec49891bab42c08287565807af5e7895dff7293398d43fd2aedfbb09f87edf1b9f547c5513df58a7816087ce47d0ef6ba7b541a0ca1eb5c5"}}}}}}}, 0x0) 08:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:43 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:43 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x400300}}, 0x10) 08:58:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:43 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2000000}}, 0x10) 08:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:43 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xec) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 08:58:43 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf000000}}, 0x10) 08:58:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r1, 0x0, r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:43 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x20000, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x2000020, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000300)={0x107, 0x7, 0x4, 0x10, 0x0, {r6, r7/1000+30000}, {0x5, 0x0, 0x1f, 0x1, 0x0, 0x40, "8f393c29"}, 0x3, 0x1, @userptr=0xc185, 0x1, 0x0, r10}) r12 = accept$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x78) sendmmsg$sock(r11, &(0x7f00000018c0)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r12, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x14}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="ffb9b378ce2ff891d8b637e7f6665f77f6b65bc78f3ba257aeb700907ded2ac158e71b7197691227a19eda9536c4e6a307a1b3217698bf107a3722c5b6c3c660650779e1e2b1e4f74a96eed5af6a5d2b1ce9539edf1ac65367a4e5fba656ed64115c22042dba1c1ef16e52efbb9005480026", 0x72}, {&(0x7f0000000540)="6b7806c85aebf48872a05aecda2759bf", 0x10}], 0x2, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r13, 0x1, 0x7cbf, 0x2, 0x1, {0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000680)="f4571d2e0e5ba223622dce57e5634f4a9da5b8f5ce17e9531791f9f39d0376d8cb5788c6be6a9ef8b8e7b19f94d5032f6701c0171c92809617e0aad5926e233553802cdfc3b12f317be52af30928841c7afc54e3174abb678b248d6beb253425670a19e7eaab09fe52024796952d5d6e23d0c50166b1546f5c4c6e", 0x7b}, {&(0x7f0000000700)="8e83af8ba73bdd9602b45438105809c8bad41adc032d4cc3a930dc75e667b57e435d64416dc59efa33ea534284eed6e63304dba8539860463afd297e3f84692753cfe19ccff2fe029c6bc0598c90e5bf4a95067415161b38bd075446d09b4705520337629852661ab9d74791f27da3649b161661413f66f8c9008cf1d85251e8f6d1e9b71e5cd6b8b87bb3ce6166d1aea5adcca57bc12b07cf2a8ea4182b67b441980de0f02dbd07d7a101dc8ba8bab1c8ee194eba71fb8f6e46f8acc640c9744eba723d763600f3f6117ae611e424baf1b776a0e90264e0ef84ccf4cafc475521915be9b6d18c62ad2db4926ba0e1a696f8ee3dc714c741ff15503b2dae62975e9b5e956e30de5419a78874f3ef903c924409ab615c32a73e9c2d5463a69e5bb3713eed3ff51b45d5425ac0d407a4e63bea658a9ded55023e6cd8d3129df4228ab2d75ff4e0d1088d4ea1ca75c6cd2ad3df9ae409204c0fcd9d5bd8a405123a56d8ec4ebc2efe56a7e1597f0f2a9cbf9a7bc219d1d43b746d168fea0b036be6733a016c2d52e8b4282229a58321b5d9368f126cc1c7962797bd1b16fd3f5071721efb35a27777cb85a0ff04f03907c33a1f50762ba81e6d3fd0938495934b3a76e7f605b44eee4f44673b34302520ff61d608a6966ecbe6b319e8a466da191d36e50f94cef85e070451b19a4caf5f969fbe3613de84e976b6c5bfad8508a4577e624f7603867e6639b7fc02dbc18466c6c69d1eac8bc35eeb3088324a855db472e5c5358a250d62d9b98157486cce22782d6e92d15640d6ad6167e82cc02dd90ba2f47f7287995e01916e2069a7cb5190ae829c615b922678e99a1095485a5cad826a411fe6b64ec321d56c30adcecc0f70b4f07b09f1a78683573fe7c5a8df1dffbc2fdf6fce6e5ec15813d9e1ea9eea4ee354048e9822b252a06829ed4908a8172be25fc0c932935717a7a6e3ff9b077993114bbdaf34d2d9e6d09f383f59c77182e9c892c3d8448761850238f7e6518c4938451a46b850d1591386820d16d04a8d26036c26836266e8490a3789bfca028a8a56f9ff2e3192f6cac5b364a12fad9f27419b8bc017b7a24b5640ba6c4598b109e7fe15ecac3264c343a536d22039041455ad7eb97065179a166e404f6be886ae38ef05fde6a5ae4c548fc1f0b4d31624645db9ee0461f3d2880d66c3d2f9e0bc9339c8987451cc9bcfcc3f2aedee43f1cc3fafabce005e8eff2685eda0b62ecb9e528ef5ebf0763912cf09813e4d5ef4e6974ec7eae1442b478cabe3c9838a5a1d34720dda37946bb0cd037551c1aed735d5962670541c162ef7171ce743fc3402abcf96cfee30bbadb81e5573f4c7503f4a1456162b59f6fa3bf8dad4898a53bd040630eed3726c896d1f6b2153f8768a2dcf6fda7976dd353c5b44a5e3b74fed9994bd417d7ce6885ba9fcdec6382d01cdc584ce3197e703cd779ec07f23cbcf6008ca91aa3c37dea17a30533c9e6558d64e5a54e86794e863a497a928df9a82209432d3580a7d74308b76347a7d54a797f60a4e983ffafbb32661afeae7f4a84ed46fb4c40e78da2c64e5262170e34212a0024f7054a75d533306f08b0df07c8f9e9adc5633a8145ddaf7d265ecb9f1acb467ae6d48bfa5e1f181aeace02f4b266dfb2851c970eb7466b786bd02fce1b693739e4957fe137c1f9423d35e1032c8fc0f100b64b25f8953c49f52851b1bb9fa93b8a55b60697b852dc628e4435931f19ad96d6b40bba21b15d991b96ac28c7265f147e74b4e730c09ba04a7fd04235082c17be2a0ca7f44035cd1c5170fb7cc2815582523ca87f7b07571d784ebb002975eb501371f43263e0f4269ec5d92384d51f2303e70d688ccbd9c74e3809f8e9f2badfbee16f67a75e2364fe307a8a3f698bca214b5feef5679bf05d34ea7c5289d456205ae6054550e4f122890330feb27560f64b89599aa7ed72b57e258fe4d35b433974d9426533ff49f629efb490e00f3f04a1754ac46e0581424a9f6a99b0c5db99d4f67d2a655c5d1458d0514725c1c23517e523838b066799636aa4e07c56be527cb53a60c8367c52b50e273ca106f9a64d8e476f37bce1e236da9aee5842fde6d3073fdc37a251dcadaa7f8dc7b1e98b2cc6686e49864ebd69f35994c9c86b3971852e95dcb68dbddd29b49c1d7de921197e19c2c475806c8c3df4d9b174514d3dbe8dd6ba43dc116ceff0718c3b7abfc73181dfbc79a9627f064c32721c45fb9ac8f41aa1fb613fe114f0f6919a18b302a713a1f5999853d7d9c66e47315a22a705efacd1cb1ec07a1132b9359342c66d225ff15d5311ae28899fea096648ded0633c5ece71c3c842d31b252359c481cfaf22cd07c1f8f2282322d1c670a71657aa3cbe1c15dadbcbca001f8334c57b55075c982913dba79936175c9366b95fe7ee3385e5a214abca8d6ac9e781913437bfe599698905841bbef7d50214318aec2b3db495967870fd022105d52cdee844f22f5ac705b5469f148a3212e458f8426321e0ca19b60cd8c32a83895f485c61437e70d312a790ea5cfaa59cd3b90f19aeaa63b7fcc732181bd73064072a57d4f6015a49489801b48c099e1852ef8669f8e2ef68d810558b362c9b56e080fae2db898fbaec7b3182261d2d0e4fb4155af6f7596f11fb095f449c47b3d98386db2680e6f3ff435d8b8a3ab8a485b6b4ca9f9640f583e1e7875c1e75093c7a2fdc38fff83895b00bc23bcd1dd00308a5f1274670e06cc0396ca2628c6d9091f26636af944a1c631fc6381c89e3d96520615a4cbd7d1a3654aada24d9d1f45cf4d93178eb63585782d15a623e252acb060d7a152998b38f3f73d05fd7d44118e2f026ef9bba26d8c30067abd1dba0c6a3deb22c84a7241a0e16f06bb003d51970dd65e6acf721b319777da3a6da37b1b5019ba446a74f655caf01999bac967a069d510dd220a9df0e1cb30a3f8351fe0d6f14c2490c9b2545bc3409c15ff1ee0c4cd2572c75b7857a48e4daf663b21a02701161563648aa586b36b22a9af770cd8374c9cbceef7e7747542e4dbc0516b145590d4b3ad010a04d7bfbb6f41f358de64c6f42caaee650edc38e80814f3814f8c05391e399c5a110c3325ea7e8b61b5d14c94c1a78c098032310b9cdc7b3490845e3816f68ecdd20f8e1422d269fc242b15baa109eb85eee4ac43e301ac33d681590475d2720aa65fc7f9597e9bc8ab520372cfb91a5a75296a226588b57608d2ce50ba194f2949d00772f16911c1bbb3b5a459872cbb3443e4cff16bd25015f10ebdc4f0bcd8d96e2478b287b6be964f7351ddfbcd3811b96d6abbfee115621cb15a368a92acc103dc8df6c524a32ff8e6f994eb1d1b46a46662ca5b8ea207f7ec321462bc46e3d73685455ac0e8b55fe823468edd984b555ec5efe54068a6c2de881b8962186931e948254e66cfba746b34683c2d1c53c471a0419d395af86c93bd81adaf471971a6ed571123a2ae072500e8e6edb57c72de040ae5c0e1112447e386e05822fec9f7ac483414e9e7f893ce770a2c668575bb195c7e3eb6a51e902412df2763faafcbfcd6aba4aaf76581dc8ed1d32f2e6330a5fa8908fada20ba12789bbcb1259c5231fb6ea8dcda73cc13f2814b4b8cca99a5b087bb18d75f7f8c75fced7768d79081ee373b20e42d7fc4f24a69eaed809206cb5f37169538a10ddc15eec47516b7ebaecc8c1018d1166dfca417c2b33bc1f9470230628f51c0316bd68cff8a4c5f679f1cf29c796562bba4309453bdbe11a428c07611026fa453983de3a88864ef198e5685a93eb7a00092b87943e499d5e17e452e3cc00798fbfd1a9189df9361879f5f7efe281edf5a18fa0454d566200c2878b24ba3c51d8964728b7368e89588b382f298195dc004d27dc8cc9740aed36d99a0283f77cc467b7815303d45312a5b50d71d1a6c12bccf004536403397d411ca2cf336fc9ea0162b2be43b61891a2486eabdcc27b47bb905a53ce456a7ee0d76a2386138abe30a804f1d5b1bdebc781a83e044ec1a20966082db5b141a74829b6b11a23e32f49765541049b57aeb856627e26899aa70c6f76f64eedf381c73644395e3e722d0864cce6093baadb26359c3eb1644f519b99791c0436f1c51d2726d088e872327ab61086ec1e237c42bdf7e0c6075c1814f6675f561f6cfaa176f6ce7c6ef12d78b24653a47c026cba7a2e85e35a7002de71b36d72d46f62ce22e0185f61450f3bcd440e82b0beb6567e96067ab8ce96417420bd6c9c7ad846df4ea995bf7e5db8d349632fe8089d321d4685b9daaab3583a89568f5aee572c894abcf89ad2994697e475ea7e720eee5356cdbfa5cfd868603e0a8561a659400e467fce2130a3b5c1227a305db03ef2321608931f40723ee36e6d59316353b3ab6d029fed4112c00bec47d8b2611f12027456377231ac0c56a948373795a74748e61020222ab230b82a894004010338a1b401e08b0fa1452d1985b2a2d605e391e719a4b95d16b16a60ef998d4f10b890e9352360d4c1572144cf6ee54e9022363f5144501829e963e2bea0b19e17d77a48085b9dc5d0e7ca2e7187608b96dced70478b0f5d86b03741ac1238dae9549d5cb7beb58cff5235128fea63db01425ddfa63d74fdf82a1fbea943bb8e03cdbf29d2951fcf8779407787acbd46207184f11296335a6a950143275fc563584d14693d3ed6908418f6ed31cc4c7f44967988010a118e561f911764891eca21816f37d8159a217ddb824dfbfe3b4ae7189c34a9f01fe3b829b0366241ac441908c11d3eb951190e02c45f405b022fb23bb4c1a7c5f16c331ebf14fd0e4fd947efb5f4c2d29b79e6528b1bf8ceba82e1eaa2d54a157b4930494a1eff47709e9d878bcffb58765b667cb9982690eb24873a6f42035906802e47bc72495ab683f6e684b455eaef071499505a219ca443555e2ba39646cdbade45b4b027bd324bb1cc791c31abda60f910294355e303fde8108b6dd59020e7f7a572cbfe9e1dd01dcf3a4ea5ad898d02fe916f04c8a0a63f8ac48da631863d3839cf942c03bf29f09a901ae46d063638ec486eb5fbcf28318b3d3cc89e73e5cc516cf56fe28b02d5c32c8ff2c9c8a7cfca404e73f103f700f0c018cd9783e7ea5124f56de406d87d045f21fe849ad33be2b306c5cd3ff37092537e15d99bea5fa5f74a39becd111e158282715d85c9d4a34cb9aa6ea49919563625b2e4134f2fa784f54c568ee97513f0ab786965ed7813b7b76820aac45238f48e6fd899891b62590160d9020a3689bec589759ab28c74f0f4a980e05ddb4fcc94d488159137dcb3e9aa359da78c07123d9421467efffb6f3a62da83382f43b382c0eb08e112538118dcd32214b688f9c0914664f24f28fa322ad3dcae0253fe9b8305b5b36666d1401fc666c88da9c2dcd933f767250268311b8c9f4606de1ae7a5e3ba8cf6602df480fed6a88cced7e4fb8e2b7347f163ecefc3bd9c552392d2bd67b7c0d1ef88f9822f8f17b4c02aa2addd571b612ac8aca22b2a274a01f561b821eef5684d35da669b209840950b80acfc6a100356832916863e11a7879d938c92dbebe965bab142b928c62a788e0e4b5d15811ab1e580f3879175f20158aa9b884d1e07385a2a091474c3dd13563337b0e1a79befb1a96c7308c435fb5b568b7ad1ddc13b99edf2e95a384d81448f777001fbf3b2e8bca854b87f922edc6c530f6a86b84a1a5e71e37910cfab13aedb37366f6ddbebb7b9c7f7a95f15dafd2997c68349fb9", 0x1000}, {&(0x7f0000001700)="167d38497085486620cda4cc6c102dcb419bc16a95d6913a6eec5acd9b29fee5dc841127ffa4c837044a3ad1fa373d784fcbeb9183cbd752c662328bacd528afda3db5b9f72487046f4bacf635e8dc232c5ce92895dd0e4341a9f4520bef4b051452ab1da2ce9debe6817d1b0abfbd625b362137dd1c42f20d23661605be31b919903d4d417905d553aaba639b43eb246a039c6fa815b95cf34ffe23fb75364fa501e7a5123572f365b8900ca3f2fe74907f55620817c1cc39b414d8329fb68398416d9b88ddca41144a6711de", 0xcd}], 0x3, &(0x7f0000001840)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x60}}], 0x2, 0xc020) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:58:44 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:44 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11000000}}, 0x10) 08:58:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:44 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:44 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) socket$unix(0x1, 0x1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x0, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:44 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x20000090) [ 406.604244][T11064] ubi0: detaching mtd0 08:58:44 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) [ 406.646136][T11064] ubi0: mtd0 is detached 08:58:44 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x0, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x20000, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x2000020, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000300)={0x107, 0x7, 0x4, 0x10, 0x0, {r6, r7/1000+30000}, {0x5, 0x0, 0x1f, 0x1, 0x0, 0x40, "8f393c29"}, 0x3, 0x1, @userptr=0xc185, 0x1, 0x0, r10}) r12 = accept$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x78) sendmmsg$sock(r11, &(0x7f00000018c0)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r12, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x14}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="ffb9b378ce2ff891d8b637e7f6665f77f6b65bc78f3ba257aeb700907ded2ac158e71b7197691227a19eda9536c4e6a307a1b3217698bf107a3722c5b6c3c660650779e1e2b1e4f74a96eed5af6a5d2b1ce9539edf1ac65367a4e5fba656ed64115c22042dba1c1ef16e52efbb9005480026", 0x72}, {&(0x7f0000000540)="6b7806c85aebf48872a05aecda2759bf", 0x10}], 0x2, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r13, 0x1, 0x7cbf, 0x2, 0x1, {0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000680)="f4571d2e0e5ba223622dce57e5634f4a9da5b8f5ce17e9531791f9f39d0376d8cb5788c6be6a9ef8b8e7b19f94d5032f6701c0171c92809617e0aad5926e233553802cdfc3b12f317be52af30928841c7afc54e3174abb678b248d6beb253425670a19e7eaab09fe52024796952d5d6e23d0c50166b1546f5c4c6e", 0x7b}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="167d38497085486620cda4cc6c102dcb419bc16a95d6913a6eec5acd9b29fee5dc841127ffa4c837044a3ad1fa373d784fcbeb9183cbd752c662328bacd528afda3db5b9f72487046f4bacf635e8dc232c5ce92895dd0e4341a9f4520bef4b051452ab1da2ce9debe6817d1b0abfbd625b362137dd1c42f20d23661605be31b919903d4d417905d553aaba639b43eb246a039c6fa815b95cf34ffe23fb75364fa501e7a5123572f365b8900ca3f2fe74907f55620817c1cc39b414d8329fb68398416d9b88ddca41144a6711de", 0xcd}], 0x3, &(0x7f0000001840)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x60}}], 0x2, 0xc020) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:58:45 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x5, 0x8, 0x4, 0x40, 0x1, {r5, r6/1000+10000}, {0x5, 0x1, 0x5, 0x81, 0x2, 0x2, "4fdba1d4"}, 0xfff, 0x1, @fd=r2, 0x3899875, 0x0, r8}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x78) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r12, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12}, 0x78) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0xbfcd6b80bcb4747f, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r14, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffff1a79170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r14}, 0x78) r15 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_vs\x00') r16 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x24160, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r0}, {0x8, 0x1, r11}, {0x8, 0x1, r1}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r17}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x440c0) r18 = dup2(r2, r1) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r19, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r19}, 0x78) pidfd_getfd(r19, r18, 0x0) bind$bt_hci(r18, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r18, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x0, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:45 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d0c, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x20000, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x2000020, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000300)={0x107, 0x7, 0x4, 0x10, 0x0, {r6, r7/1000+30000}, {0x5, 0x0, 0x1f, 0x1, 0x0, 0x40, "8f393c29"}, 0x3, 0x1, @userptr=0xc185, 0x1, 0x0, r10}) r12 = accept$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r13}, 0x78) sendmmsg$sock(r11, &(0x7f00000018c0)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r12, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e22, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x14}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="ffb9b378ce2ff891d8b637e7f6665f77f6b65bc78f3ba257aeb700907ded2ac158e71b7197691227a19eda9536c4e6a307a1b3217698bf107a3722c5b6c3c660650779e1e2b1e4f74a96eed5af6a5d2b1ce9539edf1ac65367a4e5fba656ed64115c22042dba1c1ef16e52efbb9005480026", 0x72}, {&(0x7f0000000540)="6b7806c85aebf48872a05aecda2759bf", 0x10}], 0x2, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r13, 0x1, 0x7cbf, 0x2, 0x1, {0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000680)="f4571d2e0e5ba223622dce57e5634f4a9da5b8f5ce17e9531791f9f39d0376d8cb5788c6be6a9ef8b8e7b19f94d5032f6701c0171c92809617e0aad5926e233553802cdfc3b12f317be52af30928841c7afc54e3174abb678b248d6beb253425670a19e7eaab09fe52024796952d5d6e23d0c50166b1546f5c4c6e", 0x7b}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="167d38497085486620cda4cc6c102dcb419bc16a95d6913a6eec5acd9b29fee5dc841127ffa4c837044a3ad1fa373d784fcbeb9183cbd752c662328bacd528afda3db5b9f72487046f4bacf635e8dc232c5ce92895dd0e4341a9f4520bef4b051452ab1da2ce9debe6817d1b0abfbd625b362137dd1c42f20d23661605be31b919903d4d417905d553aaba639b43eb246a039c6fa815b95cf34ffe23fb75364fa501e7a5123572f365b8900ca3f2fe74907f55620817c1cc39b414d8329fb68398416d9b88ddca41144a6711de", 0xcd}], 0x3, &(0x7f0000001840)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x60}}], 0x2, 0xc020) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:58:45 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:45 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r3, @ANYBLOB="95c40000000000000000010000000000000009410000004c00180000006062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x2, 0xfff, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x3}, 0x40080) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:46 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:46 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:46 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:46 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x6b, 0x800, 0x0, 0x2, 0x1, 0x100000000, 0x6, 0xc30f}, &(0x7f00000001c0)={0x2, 0xfffffffffffffff7, 0x40, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x7f}, &(0x7f0000000200)={0x5, 0x0, 0x200, 0x8, 0x1, 0x3ff, 0x3, 0xfffffffffffeffff}, &(0x7f0000000280)={r4, r5+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x46]}, 0x8}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x20303, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000380)=0x2, 0x4) write$FUSE_WRITE(r3, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x8, {0x4}}, 0x18) r7 = dup2(r2, r1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:46 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:46 executing program 5: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:46 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x0, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:46 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0xc, 0x4, 0x1000000, 0xf4, {r2, r3/1000+30000}, {0x2, 0xc, 0x2, 0x0, 0x0, 0x5, "6b4dcca6"}, 0x6, 0x2, @userptr=0x40fa, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000001c0)={0x10000, 0xc4}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x0, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:46 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x72100) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c010b000000000000000000"], 0x40}}, 0x0) 08:58:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:47 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) pipe(&(0x7f00000001c0)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r4, 0xa}}, 0x10) [ 409.240587][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:47 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x0, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:47 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f2a6bad004baf80c66b82d8eb68866efbafc0cb000eeee66b96906000066b80000000066ba008000000f300f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af80f20c06635000001000f22c0b000e4", 0x34}], 0x1, 0x4, 0x0, 0xfffffffffffffee4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='auxv\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr}) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="591bd7f6704c7a419e3eea018f73f453f3df1472c3a4501b954635218325763676976b9d42a2b6f9b615677084524b9309cc53860ae886e6dd76fcbbf27f1853ebea07b166d11d7de9b9745f5431d89e04d33698f0d67da4a5486d63bcb0015828f7c57c48ac322b15cbbf5a9a70e06487a248b225f88025512405bf28ca95cf55d0bfd465178c266ba02d97f5ff0640e1016b078f3bc72a06893e6ee39b17a0e2dd278edad3bb5cfbfdfdc153ae63a6bbbd0ea50c31c207acf3e1c9dfdece72011ad0f7b9d1361ded5abc2a08", @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10903, 0x0) accept4$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x0) lremovexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@random={'os2.', '/dev/ubi_ctrl\x00'}) semget(0x1, 0x4, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 08:58:47 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @loopback}, 0x1aa, 0x0, 0x0, 0x0, 0xc9, &(0x7f0000000040)='batadv_slave_1\x00', 0x4, 0x1, 0x3f}) close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0xffffff8e) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r6, 0x1}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r6}}, 0x10) 08:58:47 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:47 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x81, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) 08:58:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:48 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:49 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:49 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0xa, 0x8c8, &(0x7f0000000140)="203e2be75cee1361138e898e164807442bb0a281a93e25fc3ba6e335b71a26378a6eae94f16af2990a878be294d580d39b545dc00954f54b078a6cdf848523c4d8c8a87761132d2343b8dd9a7fd69acafc2c0be94e7fa3b26251c039866f97536c0b23a43b3ea82a069bf2da575837c27ae58261cfe8116f41c3351debc027227e7cc312610f6f9156b636f911", &(0x7f0000000200)="c2c68026cec56ed65f010ab84789d505f46cc628a3d489dd0ec84ebf456f1c220d22019a682e9891bcfb78e14f114267139a41e66bbc206014eb12601f1e469a6888cc76a2361ee63b7a5b7216a1621a7f84711d80", 0x8d, 0x55}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) write$P9_RFSYNC(r4, &(0x7f0000000280)={0x7, 0x33, 0x1}, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x78) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000480)={0x5, "0b85f65cc0a5bc8567acd1bd9d8df4294bc141061adb27124634eebb9ff2f81c", 0x2, 0x6, 0xa45, 0x80, 0x8}) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) 08:58:49 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f2a6bad004baf80c66b82d8eb68866efbafc0cb000eeee66b96906000066b80000000066ba008000000f300f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af80f20c06635000001000f22c0b000e4", 0x34}], 0x1, 0x4, 0x0, 0xfffffffffffffee4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='auxv\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr}) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="591bd7f6704c7a419e3eea018f73f453f3df1472c3a4501b954635218325763676976b9d42a2b6f9b615677084524b9309cc53860ae886e6dd76fcbbf27f1853ebea07b166d11d7de9b9745f5431d89e04d33698f0d67da4a5486d63bcb0015828f7c57c48ac322b15cbbf5a9a70e06487a248b225f88025512405bf28ca95cf55d0bfd465178c266ba02d97f5ff0640e1016b078f3bc72a06893e6ee39b17a0e2dd278edad3bb5cfbfdfdc153ae63a6bbbd0ea50c31c207acf3e1c9dfdece72011ad0f7b9d1361ded5abc2a08", @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10903, 0x0) accept4$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x0) lremovexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@random={'os2.', '/dev/ubi_ctrl\x00'}) semget(0x1, 0x4, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 08:58:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:49 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:49 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:49 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x484403) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) getresgid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) r5 = getegid() socketpair(0xb, 0x80000, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="05092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d1058f3da675b7ee378cb316402d6d792dd639116b65a2e295a3841a2faa8fa89d9fb5343646982dd4511ef5afc39f7fd8b9e54274594379e4ac248758c0f91298f7cff4e67c43e01fbc1147190eada9185316f44578d420e7198020f8c6c1127a69ec032f4536b8799ef8ec65bccbbfda6aad60a612d1ece690239ab46d16ed396716a9d6150db398b4629460b28ed4c005"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000000)='./file0\x00', r10, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r12, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r14, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r15, 0x0) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r17, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="040004000000000008000200", @ANYRES32=r14, @ANYBLOB='\b\a\x00\x00', @ANYRES32=r15, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="10000500000000002000050000000000"], 0x5c, 0x1) r18 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000000)='./file0\x00', r19, 0x0) r20 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r21, 0x0) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r24, 0x0) r25 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r26, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x7, r19}, {0x2, 0x1, r21}], {0x4, 0x4}, [{0x8, 0x2, r23}, {0x8, 0x0, r24}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r26}, {0x8, 0x2}], {0x10, 0x5}, {0x20, 0x5}}, 0x5c, 0x1) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={r8, r10, r23}, 0xc) setregid(r4, r5) 08:58:50 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:50 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:50 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bind$bt_hci(r4, &(0x7f00000002c0)={0x1f, 0x0, 0x2}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="0d092d38f0ffffd3e0f128ff78170000ffdfffff95000072007d4000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x78) getsockname$l2tp6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, r7, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0xc010) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:50 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f2a6bad004baf80c66b82d8eb68866efbafc0cb000eeee66b96906000066b80000000066ba008000000f300f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af80f20c06635000001000f22c0b000e4", 0x34}], 0x1, 0x4, 0x0, 0xfffffffffffffee4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='auxv\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr}) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="591bd7f6704c7a419e3eea018f73f453f3df1472c3a4501b954635218325763676976b9d42a2b6f9b615677084524b9309cc53860ae886e6dd76fcbbf27f1853ebea07b166d11d7de9b9745f5431d89e04d33698f0d67da4a5486d63bcb0015828f7c57c48ac322b15cbbf5a9a70e06487a248b225f88025512405bf28ca95cf55d0bfd465178c266ba02d97f5ff0640e1016b078f3bc72a06893e6ee39b17a0e2dd278edad3bb5cfbfdfdc153ae63a6bbbd0ea50c31c207acf3e1c9dfdece72011ad0f7b9d1361ded5abc2a08", @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10903, 0x0) accept4$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x0) lremovexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@random={'os2.', '/dev/ubi_ctrl\x00'}) semget(0x1, 0x4, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 08:58:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:50 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:50 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:50 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9d4c585ec3f9b0ca}}, 0x10) 08:58:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:50 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) [ 412.601563][T11379] cgroup: fork rejected by pids controller in /syz2 08:58:50 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:50 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:50 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f2a6bad004baf80c66b82d8eb68866efbafc0cb000eeee66b96906000066b80000000066ba008000000f300f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af80f20c06635000001000f22c0b000e4", 0x34}], 0x1, 0x4, 0x0, 0xfffffffffffffee4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='auxv\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr}) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="591bd7f6704c7a419e3eea018f73f453f3df1472c3a4501b954635218325763676976b9d42a2b6f9b615677084524b9309cc53860ae886e6dd76fcbbf27f1853ebea07b166d11d7de9b9745f5431d89e04d33698f0d67da4a5486d63bcb0015828f7c57c48ac322b15cbbf5a9a70e06487a248b225f88025512405bf28ca95cf55d0bfd465178c266ba02d97f5ff0640e1016b078f3bc72a06893e6ee39b17a0e2dd278edad3bb5cfbfdfdc153ae63a6bbbd0ea50c31c207acf3e1c9dfdece72011ad0f7b9d1361ded5abc2a08", @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10903, 0x0) accept4$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x0) lremovexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@random={'os2.', '/dev/ubi_ctrl\x00'}) semget(0x1, 0x4, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 08:58:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:51 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x214280, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x5, 0x2}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) write$vhci(r1, &(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = gettid() tkill(r5, 0x36) r6 = getpgid(r5) fcntl$setown(0xffffffffffffffff, 0x8, r6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:51 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:51 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:51 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:51 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x3ff, 0x3, "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"}) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:51 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:51 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f2a6bad004baf80c66b82d8eb68866efbafc0cb000eeee66b96906000066b80000000066ba008000000f300f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af80f20c06635000001000f22c0b000e4", 0x34}], 0x1, 0x4, 0x0, 0xfffffffffffffee4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='auxv\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x9, @sdr}) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="591bd7f6704c7a419e3eea018f73f453f3df1472c3a4501b954635218325763676976b9d42a2b6f9b615677084524b9309cc53860ae886e6dd76fcbbf27f1853ebea07b166d11d7de9b9745f5431d89e04d33698f0d67da4a5486d63bcb0015828f7c57c48ac322b15cbbf5a9a70e06487a248b225f88025512405bf28ca95cf55d0bfd465178c266ba02d97f5ff0640e1016b078f3bc72a06893e6ee39b17a0e2dd278edad3bb5cfbfdfdc153ae63a6bbbd0ea50c31c207acf3e1c9dfdece72011ad0f7b9d1361ded5abc2a08", @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x5}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10903, 0x0) accept4$llc(r5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x0) lremovexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@random={'os2.', '/dev/ubi_ctrl\x00'}) semget(0x1, 0x4, 0x0) renameat2(r4, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 08:58:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:51 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:51 executing program 4: write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0xc9c, 0x1ff, r0, 0x0, &(0x7f0000000100)={0x990a6b, 0xfffffff8, [], @p_u32=&(0x7f00000000c0)=0x7ff}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1eb81c317ce4b44fc49075b94068edc6b93da9d2c9fa9fec1689f77100b3f2b4d62f2e755833a0638e4ac3378c21e3fe37e78eaf350a568c6fcffb35bf61d20610f8c880261116569d14bda50081cae7447436f50067f5b4d0b3a7d81aa31a8796af627fb8f4871630e421f5ecf5a5428563c52112ea9053dfb819", @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) write$FUSE_BMAP(r6, &(0x7f0000000280)={0x18, 0x0, 0x5, {0x6}}, 0x18) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:51 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:52 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:52 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x9fad4818ee31abff) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) openat$cgroup_subtree(r4, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x0, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:52 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:52 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/42) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000000c0)={0x0, {0xf3be, 0xbb3}}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(0xffffffffffffffff, r2) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x0, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:52 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:52 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:52 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:52 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:52 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="188dbfc86a00000000000000000000001810000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8800) r8 = dup2(r7, r1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @adiantum, 0x4, [], "13e69f170597bf8d3c602367f6fddf43"}) 08:58:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x0, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:53 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:53 executing program 0 (fault-call:7 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:53 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:53 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) [ 415.389928][T12148] FAULT_INJECTION: forcing a failure. [ 415.389928][T12148] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 415.494182][T12148] CPU: 0 PID: 12148 Comm: syz-executor.0 Not tainted 5.6.0-rc3-syzkaller #0 [ 415.502899][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.512956][T12148] Call Trace: [ 415.516258][T12148] dump_stack+0x188/0x20d [ 415.520612][T12148] should_fail.cold+0x5/0xa [ 415.525133][T12148] ? fault_create_debugfs_attr+0x140/0x140 [ 415.531061][T12148] __alloc_pages_nodemask+0x17a/0x820 [ 415.536456][T12148] ? __alloc_pages_slowpath+0x26a0/0x26a0 08:58:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) [ 415.542248][T12148] ? get_pid_task+0x116/0x200 [ 415.546924][T12148] ? pmd_val+0x7c/0xf0 [ 415.551005][T12148] alloc_pages_vma+0xd9/0x600 [ 415.555703][T12148] __handle_mm_fault+0x1eaf/0x3be0 [ 415.560822][T12148] ? apply_to_existing_page_range+0x40/0x40 [ 415.566704][T12148] ? find_held_lock+0x2d/0x110 [ 415.571618][T12148] ? handle_mm_fault+0x283/0xa10 [ 415.576576][T12148] ? mark_held_locks+0x9f/0xe0 [ 415.581387][T12148] handle_mm_fault+0x398/0xa10 [ 415.586224][T12148] do_page_fault+0x554/0x12da 08:58:53 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x401, 0x0, 0xae, 0x0, 0x6}, 0xc) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x200400, 0x0) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60020}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x9ab36718380c52f5) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 415.590927][T12148] page_fault+0x39/0x40 [ 415.595071][T12148] RIP: 0033:0x40addd [ 415.598972][T12148] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 e1 53 05 00 90 41 55 41 54 55 53 48 81 ec d8 1b 00 00 <48> 89 bc 24 08 01 00 00 48 89 b4 24 00 01 00 00 48 89 94 24 f8 00 [ 415.618575][T12148] RSP: 002b:00007eff83481070 EFLAGS: 00010202 [ 415.624643][T12148] RAX: 000000000040add0 RBX: 00007eff834836d4 RCX: 0000000000000000 [ 415.632618][T12148] RDX: 0000000020fe8000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 415.640606][T12148] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 415.648563][T12148] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000008 [ 415.656516][T12148] R13: 0000000000000bd1 R14: 00000000004cdb22 R15: 0000000000000000 [ 415.666932][T12148] syz-executor.0 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 415.721240][T12148] CPU: 1 PID: 12148 Comm: syz-executor.0 Not tainted 5.6.0-rc3-syzkaller #0 [ 415.729966][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.740021][T12148] Call Trace: [ 415.743309][T12148] dump_stack+0x188/0x20d [ 415.747814][T12148] dump_header+0x10b/0x826 [ 415.752231][T12148] oom_kill_process.cold+0x10/0x15 [ 415.757332][T12148] out_of_memory+0x31f/0x12f0 [ 415.762704][T12148] ? pagefault_out_of_memory+0xde/0x10d [ 415.768238][T12148] ? oom_killer_disable+0x270/0x270 [ 415.773425][T12148] ? mutex_trylock+0x246/0x2c0 [ 415.778175][T12148] ? pagefault_out_of_memory+0xde/0x10d [ 415.783710][T12148] pagefault_out_of_memory+0xfa/0x10d [ 415.789067][T12148] ? out_of_memory+0x12f0/0x12f0 [ 415.794057][T12148] ? down_read_non_owner+0x470/0x470 [ 415.799347][T12148] mm_fault_error+0x123/0x380 [ 415.804016][T12148] do_page_fault+0x102c/0x12da [ 415.808792][T12148] page_fault+0x39/0x40 [ 415.812933][T12148] RIP: 0033:0x40addd [ 415.816813][T12148] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 e1 53 05 00 90 41 55 41 54 55 53 48 81 ec d8 1b 00 00 <48> 89 bc 24 08 01 00 00 48 89 b4 24 00 01 00 00 48 89 94 24 f8 00 [ 415.836399][T12148] RSP: 002b:00007eff83481070 EFLAGS: 00010202 [ 415.842451][T12148] RAX: 000000000040add0 RBX: 00007eff834836d4 RCX: 0000000000000000 [ 415.850405][T12148] RDX: 0000000020fe8000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 415.858360][T12148] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 08:58:53 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:53 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000340)={0x9, 0x9, 0x4, 0x2002, 0x3f, {}, {0x5, 0x1, 0xff, 0x9, 0x3f, 0xff, "2cbf79c4"}, 0x0, 0x2, @offset=0x10000000, 0x10000, 0x0, r3}) write$cgroup_int(r4, &(0x7f0000000080)=0x6, 0x12) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) close(0xffffffffffffffff) inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2825, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x80000001, 0x1f}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000540)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x0, @dev}, 0x0, {}, 'batadv_slave_1\x00'}) r7 = socket$inet_dccp(0x2, 0x6, 0x0) dup(r7) r8 = socket$inet6(0xa, 0x3, 0x20000000021) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x8, 0x0) unlinkat(r9, &(0x7f00000005c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r9, 0xc01864b0, &(0x7f0000000000)={0x6, 0x62, 0x1, 0xfffffe00, 0x5}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r8, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) [ 415.866316][T12148] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000008 [ 415.874272][T12148] R13: 0000000000000bd1 R14: 00000000004cdb22 R15: 0000000000000000 08:58:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x4, 0x8, 0x4, 0xe000, 0x1c0, {}, {0x3, 0xc, 0x3, 0x8, 0x0, 0x2, "0e0677d4"}, 0x0, 0x3, @planes=&(0x7f00000000c0)={0xb0, 0x0, @userptr=0x1, 0x6}, 0x4, 0x0, r0}) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) [ 416.053289][T12148] Mem-Info: [ 416.056916][T12148] active_anon:254235 inactive_anon:220 isolated_anon:0 [ 416.056916][T12148] active_file:7835 inactive_file:44322 isolated_file:0 [ 416.056916][T12148] unevictable:0 dirty:155 writeback:0 unstable:0 [ 416.056916][T12148] slab_reclaimable:14958 slab_unreclaimable:102717 [ 416.056916][T12148] mapped:61088 shmem:301 pagetables:2197 bounce:0 [ 416.056916][T12148] free:1086828 free_pcp:570 free_cma:0 08:58:54 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) [ 416.490721][T12148] Node 0 active_anon:1004352kB inactive_anon:880kB active_file:31200kB inactive_file:177288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244352kB dirty:616kB writeback:0kB shmem:1204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 919552kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 416.546689][T12148] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 416.574923][T12148] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.604941][T12148] lowmem_reserve[]: 0 2521 2521 2521 2521 [ 416.610735][T12148] Node 0 DMA32 free:577512kB min:35968kB low:44960kB high:53952kB reserved_highatomic:0KB active_anon:1004328kB inactive_anon:880kB active_file:31120kB inactive_file:177312kB unevictable:0kB writepending:648kB present:3129332kB managed:2584792kB mlocked:0kB kernel_stack:9600kB pagetables:8124kB bounce:0kB free_pcp:2748kB local_pcp:1444kB free_cma:0kB [ 416.644333][T12148] lowmem_reserve[]: 0 0 0 0 0 [ 416.649108][T12148] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:80kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.678340][T12148] lowmem_reserve[]: 0 0 0 0 0 [ 416.683125][T12148] Node 1 Normal free:3768960kB min:53916kB low:67392kB high:80868kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 416.714077][T12148] lowmem_reserve[]: 0 0 0 0 0 [ 416.718779][T12148] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 416.733278][T12148] Node 0 DMA32: 8913*4kB (UME) 25*8kB (UME) 45*16kB (UM) 24*32kB (UME) 0*64kB 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UE) 3*2048kB (M) 129*4096kB (M) = 577244kB [ 416.750369][T12148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 416.761961][T12148] Node 1 Normal: 4*4kB (UME) 96*8kB (UME) 195*16kB (UME) 84*32kB (UM) 29*64kB (UME) 23*128kB (UME) 6*256kB (U) 4*512kB (U) 2*1024kB (ME) 2*2048kB (ME) 915*4096kB (M) = 3768960kB [ 416.779705][T12148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.789600][T12148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.798997][T12148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.808774][T12148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.818147][T12148] 49818 total pagecache pages [ 416.822834][T12148] 0 pages in swap cache [ 416.827057][T12148] Swap cache stats: add 0, delete 0, find 0/0 [ 416.833189][T12148] Free swap = 0kB [ 416.836920][T12148] Total swap = 0kB [ 416.840639][T12148] 1965979 pages RAM [ 416.844516][T12148] 0 pages HighMem/MovableOnly [ 416.849216][T12148] 348234 pages reserved [ 416.853592][T12148] 0 pages cma reserved [ 416.857686][T12148] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=9914,uid=0 [ 416.873876][T12148] Out of memory: Killed process 9914 (syz-executor.5) total-vm:75232kB, anon-rss:8372kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 08:58:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:58:54 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:54 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r8}, @map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r11) r13 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r11}, @map={0x18, 0x0, 0x1, 0x0, r12}, @map={0x18, 0x0, 0x1, 0x0, r13}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xb, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[], @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf2502000000080002000200000008000100000000000800020002000000080001000300050008000200020000000800010001000000"], 0x3}}, 0x22040040) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:54 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x3, &(0x7f00000001c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000480)=""/180) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x78) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x0, 0x1, 0x0, r7}, @map={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x14, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r9}, @map={0x18, 0x0, 0x1, 0x0, r10}, @map={0x18, 0x0, 0x1, 0x0, r11}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000540)=""/225, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000000, 0xfffffffe}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYPTR, @ANYRES64=r11], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x18, r5, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={'geneve1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r12, 0x9, &(0x7f0000000240)=""/122) socket$kcm(0x2b, 0x1, 0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r13) r15 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r13, @ANYBLOB="000000000000000018100000", @ANYRES32=r14, @ANYBLOB="000000000000000018100000", @ANYRES32=r15, @ANYBLOB="00000000000000009500000000000200"], &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) ioctl$EXT4_IOC_GROUP_ADD(r13, 0x40286608, &(0x7f0000000140)={0x9, 0x8, 0x43b9, 0x8, 0x1, 0x800}) [ 416.894036][ T1044] oom_reaper: reaped process 9914 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 08:58:54 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:55 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="f50867ddc0aaa4e15019f8d7a0eef8c25b0262cdd5a917b6459f9ba9a765c383f7e4c41eeeb762cfe947a8d783607f", @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d10536443a4df96791cba55178bc89ea026fc719677b20140f63cc9b0299189a5cb5b67efef45e6d8187e782e4c7ce2b46f9d3b2b7c2a34fded7e06a8d31d18f8aa9e33d6d49334c042d4ea25fe4cf8872da1d17520205693742ddee0265d632bab9aadf624dd73fdef30f8b615767feb446399f96130cc7a437ddfed160fb56f914de4f57d4c606000000da00000074df11e6c1c23345b4155809d75ccda324be0a65039736eed8f09c6a05a86f4964"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000280)=0xfffffbff) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000580)={0x0, 0x0, [], @raw_data=[0x8, 0xfffffe01, 0x40, 0x7fffffff, 0x1ff, 0x59b, 0xaf, 0x81, 0xa94, 0x7ae1, 0x6c7b79be, 0x0, 0x66, 0x1ff, 0x642, 0xba4, 0x0, 0x1, 0x0, 0x101, 0x1ff, 0x2, 0x7, 0x1, 0x1, 0x3, 0x3, 0x200, 0xffff, 0x9, 0x9, 0x28b1]}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, @ipx={0x4, 0x0, 0x1, "ce1d1411e58e", 0x5}, @vsock={0x28, 0x0, 0x2711, @hyper}, @l2tp={0x2, 0x0, @remote, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x536, 0x0, 0x2}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$netrom(0xffffffffffffffff, &(0x7f0000000140)="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", 0x1000, 0x20048095, &(0x7f0000001140)={{0x3, @default, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001800)={0x0, 0xffffff68, 0x33e5765a, 0x80000000}, &(0x7f0000001840)=0x10) r4 = dup2(r2, r1) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f00000000c0)={0x29, 0x2}) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f00000001c0)='wlan1\x00c\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00 \x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) sendmsg$kcm(r3, &(0x7f0000000900)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @empty, 'macvlan0\x00'}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="a0a33d0ae4b1f500778e33f401294fd5f957d132e63f39f945b41f3ab8c39ae07cacee8b13c028ec372153f0be2b50808107f1e405d83a6ceeddcc734d12b2b5e2ae04f8af3a9c1a571545594a785dd0a9a7395f959e00274d4371f6d170a31fc708e0903ecf243fb43597c266c90c4ae48e27c4888dd4d2a0c5978c2c969fb0ef2c1d89dbafbe02ed40a7e2c4e81afde87735ae2557284b0307dbca8577803c630d032b7f989f9190ab", 0xaa}, {&(0x7f00000005c0)="0a05d2c2d2fba5c3c20c0b1dacada106c7e15f23e0ceaf2266265a0d41c11009bb78e08f6d95211554e86003cd930d7a0dc27566407376945c47060c3672bc06079c276c1bdc3698381205ef38fee41fe38a", 0x52}, {&(0x7f0000000140)}, {&(0x7f0000000640)="9a1cda5c8ef8481a5e6e6608235a2eab6bfc8aef1212286be86de08e1bfd97472ccbb847537cee16fb82a6fe04fd746ec3ef20e93ff62918829c1ddd654fc74b4b8e4563bac91014a8054b5c90ad2be6239cd0d100ebf42e175217ded9416c9855d07c2d7d8540d02f4320", 0x6b}, {&(0x7f00000006c0)="e515f33d0d9b736a490a84754741815b1f3b672ae60d18963e97c788667ef89f0ae49420ad6e665833574e0b505327e2235e8e6ce087814d12a47e594ef60b27a0687c7819708c4cc56648a73692b8353405412fbee0cf45be03efb21ae5bafd9cecfe465de55c444f736323", 0x6c}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x128}, 0x8000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='selinuxeth0\'securityGPL@.[security-.\x00', &(0x7f0000000040)='./file0\x00', r3) 08:58:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0x0) 08:58:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:55 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:55 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x7, 0x224000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x3, 0x0, 0x0, 0x0) 08:58:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f00000001c0)='wlan1\x00c\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00 \x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) sendmsg$kcm(r3, &(0x7f0000000900)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @empty, 'macvlan0\x00'}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="a0a33d0ae4b1f500778e33f401294fd5f957d132e63f39f945b41f3ab8c39ae07cacee8b13c028ec372153f0be2b50808107f1e405d83a6ceeddcc734d12b2b5e2ae04f8af3a9c1a571545594a785dd0a9a7395f959e00274d4371f6d170a31fc708e0903ecf243fb43597c266c90c4ae48e27c4888dd4d2a0c5978c2c969fb0ef2c1d89dbafbe02ed40a7e2c4e81afde87735ae2557284b0307dbca8577803c630d032b7f989f9190ab", 0xaa}, {&(0x7f00000005c0)="0a05d2c2d2fba5c3c20c0b1dacada106c7e15f23e0ceaf2266265a0d41c11009bb78e08f6d95211554e86003cd930d7a0dc27566407376945c47060c3672bc06079c276c1bdc3698381205ef38fee41fe38a", 0x52}, {&(0x7f0000000140)}, {&(0x7f0000000640)="9a1cda5c8ef8481a5e6e6608235a2eab6bfc8aef1212286be86de08e1bfd97472ccbb847537cee16fb82a6fe04fd746ec3ef20e93ff62918829c1ddd654fc74b4b8e4563bac91014a8054b5c90ad2be6239cd0d100ebf42e175217ded9416c9855d07c2d7d8540d02f4320", 0x6b}, {&(0x7f00000006c0)="e515f33d0d9b736a490a84754741815b1f3b672ae60d18963e97c788667ef89f0ae49420ad6e665833574e0b505327e2235e8e6ce087814d12a47e594ef60b27a0687c7819708c4cc56648a73692b8353405412fbee0cf45be03efb21ae5bafd9cecfe465de55c444f736323", 0x6c}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x128}, 0x8000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='selinuxeth0\'securityGPL@.[security-.\x00', &(0x7f0000000040)='./file0\x00', r3) 08:58:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 08:58:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f00000000c0)=0xfffffff8) write$binfmt_elf32(r1, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0xf3, 0x8d, 0x1, 0x40, 0x299b, 0x2, 0x3, 0x7fffffff, 0x111, 0x38, 0xc3, 0x1, 0xfc88, 0x20, 0x2, 0xa28e, 0x3, 0x1}, [{0x4, 0x4, 0x2f5, 0x8, 0x1, 0xc8, 0x7, 0xff}], "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", [[], [], [], []]}, 0x1458) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:55 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 08:58:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x4, 0x0, 0x0, 0x0) 08:58:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f00000001c0)='wlan1\x00c\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00 \x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) sendmsg$kcm(r3, &(0x7f0000000900)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @empty, 'macvlan0\x00'}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="a0a33d0ae4b1f500778e33f401294fd5f957d132e63f39f945b41f3ab8c39ae07cacee8b13c028ec372153f0be2b50808107f1e405d83a6ceeddcc734d12b2b5e2ae04f8af3a9c1a571545594a785dd0a9a7395f959e00274d4371f6d170a31fc708e0903ecf243fb43597c266c90c4ae48e27c4888dd4d2a0c5978c2c969fb0ef2c1d89dbafbe02ed40a7e2c4e81afde87735ae2557284b0307dbca8577803c630d032b7f989f9190ab", 0xaa}, {&(0x7f00000005c0)="0a05d2c2d2fba5c3c20c0b1dacada106c7e15f23e0ceaf2266265a0d41c11009bb78e08f6d95211554e86003cd930d7a0dc27566407376945c47060c3672bc06079c276c1bdc3698381205ef38fee41fe38a", 0x52}, {&(0x7f0000000140)}, {&(0x7f0000000640)="9a1cda5c8ef8481a5e6e6608235a2eab6bfc8aef1212286be86de08e1bfd97472ccbb847537cee16fb82a6fe04fd746ec3ef20e93ff62918829c1ddd654fc74b4b8e4563bac91014a8054b5c90ad2be6239cd0d100ebf42e175217ded9416c9855d07c2d7d8540d02f4320", 0x6b}, {&(0x7f00000006c0)="e515f33d0d9b736a490a84754741815b1f3b672ae60d18963e97c788667ef89f0ae49420ad6e665833574e0b505327e2235e8e6ce087814d12a47e594ef60b27a0687c7819708c4cc56648a73692b8353405412fbee0cf45be03efb21ae5bafd9cecfe465de55c444f736323", 0x6c}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x128}, 0x8000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='selinuxeth0\'securityGPL@.[security-.\x00', &(0x7f0000000040)='./file0\x00', r3) 08:58:56 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) 08:58:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, "1e0c1e103bdedf18586832d47a3fb496a6f11e2457934ece4cb575a8f2ef18d0d652b27949e857b81b53b4"}, 0x2c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:56 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x5, 0x0, 0x0, 0x0) 08:58:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:56 executing program 1 (fault-call:6 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) r4 = getpgrp(0xffffffffffffffff) rt_sigqueueinfo(r4, 0x3b, &(0x7f0000000140)={0x9, 0xffffff7f, 0x5}) 08:58:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x6, 0x0, 0x0, 0x0) 08:58:56 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:56 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) clone(0x8020100101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 08:58:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:57 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8, 0xfa02}, 0x10) 08:58:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x7, 0x0, 0x0, 0x0) 08:58:57 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff781700001b00ffff950018000000006fc730c92123f4e100"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) clone(0x8020100101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 08:58:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x1, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:57 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(0x0, 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:57 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8, 0xfa04}, 0x10) 08:58:57 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x40800, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000300)={0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xf1, 0x5, 0x5, 0x80, 0x0, 0x1, 0x1804, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x800, 0x8}, 0x1, 0x5, 0x9, 0x7, 0xe8, 0xffffb3c9, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='trustedvmnet0,#systemvmnet1,keyringcpuset\x00') syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6effff6172726965722c6e6c618f1c86637475726b6973684dde"]) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x6, 0x8000, 0x6, 0x1, 0x8, 0x7, 0x80, 0xa0, 0x0, 0x1, 0xf9, 0x6, 0xffffffffffffffe1}, {0x7, 0x7ff, 0x7, 0x29, 0x9, 0x5, 0x7f, 0x7, 0x6f, 0xff, 0xa6, 0x9, 0x7ffd}, {0x38a3, 0x13a5, 0x9, 0x0, 0x2, 0x2, 0x5, 0x81, 0x7f, 0x65, 0x6, 0x7, 0x9}], 0x47}) 08:58:57 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8}, 0x10) sendto$phonet(r3, &(0x7f00000000c0)="4c7c480e", 0x4, 0x10004800, &(0x7f0000000140)={0x23, 0x3, 0x4, 0x6}, 0x10) 08:58:57 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8}, 0x10) 08:58:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x0, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:57 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(0x0, 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x7e, 0x0, 0x0, 0x0) 08:58:57 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d4e802ef1ffffff781700000804000000c2d6d28105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) write$FUSE_WRITE(r2, &(0x7f0000000140)={0x18, 0x0, 0x5, {0x80000000}}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x78) sendfile(r5, r6, &(0x7f0000000280)=0x8001, 0x3) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x0, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:57 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 420.126216][T13209] hfsplus: unable to parse mount options 08:58:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x300, 0x0, 0x0, 0x0) 08:58:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x0, 0x4, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:58 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(0x0, 0x8001420, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:58 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x40800, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000300)={0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xf1, 0x5, 0x5, 0x80, 0x0, 0x1, 0x1804, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x800, 0x8}, 0x1, 0x5, 0x9, 0x7, 0xe8, 0xffffb3c9, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='trustedvmnet0,#systemvmnet1,keyringcpuset\x00') syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6effff6172726965722c6e6c618f1c86637475726b6973684dde"]) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x40000, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x6, 0x8000, 0x6, 0x1, 0x8, 0x7, 0x80, 0xa0, 0x0, 0x1, 0xf9, 0x6, 0xffffffffffffffe1}, {0x7, 0x7ff, 0x7, 0x29, 0x9, 0x5, 0x7f, 0x7, 0x6f, 0xff, 0xa6, 0x9, 0x7ffd}, {0x38a3, 0x13a5, 0x9, 0x0, 0x2, 0x2, 0x5, 0x81, 0x7f, 0x65, 0x6, 0x7, 0x9}], 0x47}) 08:58:58 executing program 4: eventfd(0x8001) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32], 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d092d38f0ffffff78170000ffffffff9500000000004000180000000000000000000020d105"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f00000000c0)=0xbb6, 0x4) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) 08:58:58 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) 08:58:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x500, 0x0, 0x0, 0x0) 08:58:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x0, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:58 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 08:58:58 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x28000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x5, 0x1, 0x8}}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000080)={0xf, 0x8}, 0x10) [ 420.737201][T13363] hfsplus: unable to parse mount options 08:58:58 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8, 0xfa00, {0xffffffffffffffff, 0x1000000}}, 0x10) 08:58:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0xe, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r6, 0x40}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r7, 0x200004) sendfile(r0, r7, 0x0, 0x80001d00c0d0) 08:58:58 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) write$vhci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0x5, 0x8, 0xfa00, {0xffffffffffffffff, 0x2000000}}, 0x10) 08:58:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x0, 0x100000001}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 08:58:58 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 421.105764][T13594] ------------[ cut here ]------------ [ 421.111263][T13594] DEBUG_LOCKS_WARN_ON(1) [ 421.111365][T13594] WARNING: CPU: 0 PID: 13594 at kernel/locking/lockdep.c:167 __lock_acquire+0x1ccc/0x3ca0 [ 421.125527][T13594] Kernel panic - not syncing: panic_on_warn set ... [ 421.132089][T13594] CPU: 0 PID: 13594 Comm: syz-executor.1 Not tainted 5.6.0-rc3-syzkaller #0 [ 421.140771][T13594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.150837][T13594] Call Trace: [ 421.154110][T13594] dump_stack+0x188/0x20d [ 421.158417][T13594] ? __lock_acquire+0x1c10/0x3ca0 [ 421.163469][T13594] panic+0x2e3/0x75c [ 421.167342][T13594] ? add_taint.cold+0x16/0x16 [ 421.171998][T13594] ? __probe_kernel_read+0x188/0x1d0 [ 421.177266][T13594] ? __warn.cold+0x14/0x35 [ 421.181668][T13594] ? __warn+0xd5/0x1c8 [ 421.185733][T13594] ? __lock_acquire+0x1ccc/0x3ca0 [ 421.190732][T13594] __warn.cold+0x2f/0x35 [ 421.194968][T13594] ? __lock_acquire+0x1ccc/0x3ca0 [ 421.199980][T13594] report_bug+0x27b/0x2f0 [ 421.204322][T13594] do_error_trap+0x12b/0x220 [ 421.208897][T13594] ? __lock_acquire+0x1ccc/0x3ca0 [ 421.213894][T13594] do_invalid_op+0x32/0x40 [ 421.218297][T13594] ? __lock_acquire+0x1ccc/0x3ca0 [ 421.223644][T13594] invalid_op+0x23/0x30 [ 421.227772][T13594] RIP: 0010:__lock_acquire+0x1ccc/0x3ca0 [ 421.233383][T13594] Code: d0 7c 08 84 d2 0f 85 7e 17 00 00 44 8b 2d ec af 0d 09 45 85 ed 75 ba 48 c7 c6 60 71 0b 88 48 c7 c7 a0 71 0b 88 e8 1c ca eb ff <0f> 0b 31 db e9 8f fa ff ff 48 89 c5 83 7c 24 08 01 0f 84 5b 06 00 [ 421.253016][T13594] RSP: 0018:ffffc90003497780 EFLAGS: 00010086 [ 421.259059][T13594] RAX: 0000000000000000 RBX: 0000000000000b08 RCX: 0000000000000000 [ 421.267005][T13594] RDX: 0000000040000002 RSI: ffffffff815bf411 RDI: fffff52000692ee2 [ 421.274949][T13594] RBP: ffff8880452e8000 R08: ffff8880452e8000 R09: fffffbfff12f4365 [ 421.282904][T13594] R10: fffffbfff12f4364 R11: ffffffff897a1b23 R12: 000000000d7aee93 [ 421.290854][T13594] R13: 0000000000000000 R14: ffffffff8a660b90 R15: ffff8880452e88e8 [ 421.298865][T13594] ? vprintk_func+0x81/0x17e [ 421.303442][T13594] ? mark_held_locks+0xe0/0xe0 [ 421.308219][T13594] ? __perf_event_task_sched_in+0x1b9/0x7c0 [ 421.314090][T13594] lock_acquire+0x197/0x420 [ 421.318596][T13594] ? finish_task_switch+0x119/0x750 [ 421.323770][T13594] finish_task_switch+0x13f/0x750 [ 421.328804][T13594] ? finish_task_switch+0x119/0x750 [ 421.333978][T13594] __schedule+0x93c/0x1f90 [ 421.338601][T13594] ? __sched_text_start+0x8/0x8 [ 421.343432][T13594] ? mark_held_locks+0x9f/0xe0 [ 421.348187][T13594] preempt_schedule_irq+0xb0/0x150 [ 421.353285][T13594] retint_kernel+0x1b/0x2b [ 421.357677][T13594] RIP: 0010:lock_acquire+0x209/0x420 [ 421.362935][T13594] Code: 94 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 de 01 00 00 48 83 3d 0b 20 1b 08 00 0f 84 5a 01 00 00 48 8b 3c 24 57 9d <0f> 1f 44 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b [ 421.382571][T13594] RSP: 0018:ffffc90003497b18 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 421.390972][T13594] RAX: 1ffffffff12e764f RBX: ffff8880452e8000 RCX: ffffffff8158627b [ 421.398920][T13594] RDX: dffffc0000000000 RSI: 1ffff92000692f4c RDI: 0000000000000286 [ 421.406868][T13594] RBP: ffff888095b22128 R08: 0000000000000004 R09: fffffbfff1873e21 [ 421.414812][T13594] R10: fffffbfff1873e20 R11: 0000000000000003 R12: 0000000000000000 [ 421.422801][T13594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.430753][T13594] ? __lock_acquire+0x238b/0x3ca0 [ 421.435759][T13594] flush_workqueue+0x126/0x14c0 [ 421.440596][T13594] ? flush_workqueue+0xf7/0x14c0 [ 421.445516][T13594] ? find_held_lock+0x2d/0x110 [ 421.450261][T13594] ? pwq_unbound_release_workfn+0x2d0/0x2d0 [ 421.456207][T13594] ? hci_dev_open+0xdb/0x280 [ 421.460775][T13594] hci_dev_open+0xdb/0x280 [ 421.465169][T13594] hci_sock_bind+0x427/0x1140 [ 421.469821][T13594] ? hci_sock_compat_ioctl+0x80/0x80 [ 421.475086][T13594] __sys_bind+0x20e/0x250 [ 421.480062][T13594] ? __ia32_sys_socketpair+0xf0/0xf0 [ 421.485391][T13594] ? ns_to_kernel_old_timeval+0x100/0x100 [ 421.491113][T13594] ? __x64_sys_futex+0x380/0x4f0 [ 421.496026][T13594] ? __x64_sys_clock_gettime+0x165/0x240 [ 421.501629][T13594] ? __ia32_sys_clock_settime+0x260/0x260 [ 421.507321][T13594] ? trace_hardirqs_off_caller+0x55/0x230 [ 421.513028][T13594] __x64_sys_bind+0x6f/0xb0 [ 421.517519][T13594] ? lockdep_hardirqs_on+0x417/0x5d0 [ 421.522798][T13594] do_syscall_64+0xf6/0x790 [ 421.527282][T13594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.533150][T13594] RIP: 0033:0x45c4a9 [ 421.537023][T13594] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.556601][T13594] RSP: 002b:00007fe702db2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 421.564998][T13594] RAX: ffffffffffffffda RBX: 00007fe702db36d4 RCX: 000000000045c4a9 [ 421.573000][T13594] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000005 [ 421.580951][T13594] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 421.589021][T13594] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 421.596967][T13594] R13: 000000000000002c R14: 00000000004c2935 R15: 000000000076bf2c [ 422.697142][T13594] Shutting down cpus with NMI [ 422.703526][T13594] Kernel Offset: disabled [ 422.707849][T13594] Rebooting in 86400 seconds..