[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.316550] kauditd_printk_skb: 7 callbacks suppressed [ 26.316563] audit: type=1800 audit(1539910150.569:29): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 26.343123] audit: type=1800 audit(1539910150.579:30): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2018/10/19 00:49:26 fuzzer started 2018/10/19 00:49:28 dialing manager at 10.128.0.26:33865 2018/10/19 00:49:28 syscalls: 1 2018/10/19 00:49:28 code coverage: enabled 2018/10/19 00:49:28 comparison tracing: enabled 2018/10/19 00:49:28 setuid sandbox: enabled 2018/10/19 00:49:28 namespace sandbox: enabled 2018/10/19 00:49:28 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/19 00:49:28 fault injection: enabled 2018/10/19 00:49:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/19 00:49:28 net packed injection: enabled 2018/10/19 00:49:28 net device setup: enabled 00:52:38 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x108, 0x2, 0x1, 0xef, 0x202, 0x38a, 0xcd, 0x1000000000000000}, "b6b57af11dd7b95df02df50c8e2c9e1744e45ec978f536d56e31f62a847a021cdb945ed3017d0b", [[], []]}, 0x247) r1 = accept(0xffffffffffffff9c, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000340)=0x80) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000380)={0x77359400}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) write$binfmt_aout(r1, &(0x7f0000000400)={{0x10f, 0x5e756b1a, 0x9, 0x3d6, 0x29e, 0x0, 0x144, 0x4}, "bbe4ea7d4003e74e7a971e2f3b661d679e42ac7cce0e19d27037f6c2e253052769a054b8bfa6a837e6b3aac034c104be04786009f2230e0594ced181575bbe21ed9d6ffc4caef80990a5e87c9ed34a6baebf7206829543b71b6dc39f74c3f6309b43e5159ea6cfb413ddad6c60a9c56d03f345dbb9b1e0f6bfb9e0b87b7769d19f85818fc977c3605578170399a889b1a47c61b4d830f75c3934f5447baa9d9349b5bae6ddc6c75999c0", [[], [], [], [], [], []]}, 0x6ca) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/mixer\x00', 0x280000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000b40)={0x7f, 0x5, 0x9, 0x0, 0x0, [], [], [], 0x44, 0x5}) write$binfmt_misc(r3, &(0x7f0000000c80)={'syz1', "88bf341e77b52c19"}, 0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000cc0)=0x80, 0x4) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000d00)=0x3, 0x4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer\x00', 0xc00, 0x0) accept$inet6(r2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x1c) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000e00)=0x3, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000e40)={0x0, @aes128, 0x2, "b282567ca8f76d64"}) r6 = semget$private(0x0, 0x1, 0x6) semctl$IPC_INFO(r6, 0x2, 0x3, &(0x7f0000000e80)=""/84) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000f40)={0x7, &(0x7f0000000f00)=[{0xefd3, 0x2, 0x79, 0x7}, {0xffffffffffff8000, 0x4, 0x7, 0xce}, {0x1, 0x7ff, 0x20, 0x80}, {0x8, 0x2, 0x100000001, 0x2}, {0x5, 0xff, 0x0, 0x6}, {0x6, 0x1, 0x2}, {0x9af8, 0x20, 0x100000001}]}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000f80)={0x0, 0x7, 0xa, [0x3, 0x7, 0x5d02, 0x5, 0x2, 0x800, 0x3, 0x200000000, 0x8, 0x476955fe]}, &(0x7f0000000fc0)=0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001100)={r7, 0xcc, &(0x7f0000001000)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}, 0x2}, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @multicast2}, 0x8}, @in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, 0x8}, @in6={0xa, 0x4e21, 0x6, @ipv4={[], [], @multicast1}, 0x5}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x3f, @empty, 0xffffffffa79ddaef}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000001140)=0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000001180)={0x80000001, 0x0, 0x2, 0xff}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f00000011c0)={0x101, r8}) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000001200)={0x7, 0x3, 0x2, 0x2a5, 0x1, 0xffffffff}) r9 = getpid() sched_rr_get_interval(r9, &(0x7f0000001240)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001280)={r7, 0xff, 0x2}, &(0x7f00000012c0)=0x8) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000001300), 0x4) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000001340)=""/41) syzkaller login: [ 234.638843] IPVS: ftp: loaded support on port[0] = 21 00:52:39 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x2c, 0x6, 0x0, {0x4, 0x1, 0x3, 0x0, '(^*'}}, 0x2c) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x29, 0x6, 0x0, {0x4, 0x1}}, 0x29) fcntl$setlease(r0, 0x400, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000200)={r2, 0x2f}) r3 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) write$sndseq(r3, &(0x7f00000002c0)=[{0xe0fc, 0x20, 0x1, 0x0, @time={0x0, 0x1c9c380}, {0x7, 0x3}, {0x200, 0x8}, @note={0x48, 0xb5a4, 0x8000, 0x5, 0xb1}}, {0x6575, 0xfff, 0x1, 0xfff, @tick=0x10000, {0x1, 0x3f}, {0x1, 0xfffffffffffffc00}, @queue={0x7, {0x100000000, 0x2e}}}, {0x10000, 0x4, 0x800, 0xe1, @time={0x77359400}, {0x121a, 0x7}, {0xfffffffffffffffb, 0x2}, @ext={0x1b, &(0x7f0000000280)="4d1a49b1aad4a0458227c4147e829a5e816cd8e97a41e2caf5c209"}}, {0x10001, 0x5, 0x0, 0x6, @tick=0xff, {0xb77, 0x2}, {0x0, 0x5}, @result={0x8, 0x2}}, {0x101, 0x9, 0x20, 0x2, @time={0x77359400}, {0xffff, 0x4}, {0x9, 0x5}, @time=@time}], 0xf0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x3ff, 0x0, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0xffffffffffffffff}) socketpair(0x5, 0x7, 0xf4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000480)={0x20}) write$FUSE_WRITE(r5, &(0x7f00000004c0)={0x18, 0x0, 0x5, {0x588}}, 0x18) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000500)=0x4) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) accept$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000880)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@broadcast, @in=@remote, 0x4e22, 0x8, 0x4e21, 0x8, 0xa, 0x80, 0x20, 0xc, r8, r9}, {0xc2c9, 0xef, 0x3f, 0xfff, 0x40, 0x5, 0x58, 0x81}, {0xd1cc, 0x7, 0x200, 0xffff}, 0x7f, 0x6e6bbd, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d2, 0x3c}, 0xa, @in, 0x3505, 0x7, 0x0, 0x3ff, 0x8, 0x3}}, 0xe8) fcntl$setstatus(r6, 0x4, 0x800) io_setup(0x43, &(0x7f00000009c0)=0x0) io_cancel(r10, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0x5, r6, &(0x7f0000000a00)="e32b79b48d4cf4d50cddbc346ce8552b97204b4e900a69fc078601e1a6bcf16f183372dc141553bf20d3d5c00786aa2328163a39c3f49475e48a8e382f5bfb664ca03fad7e70e9b87a5c65", 0x4b, 0x100000000, 0x0, 0x1}, &(0x7f0000000ac0)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000b80)={0x10, 0x30, 0xfa00, {&(0x7f0000000b40)={0xffffffffffffffff}, 0x3, {0xa, 0x4e22, 0xffffffff, @remote, 0xfff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000bc0)={0x11, 0x10, 0xfa00, {&(0x7f0000000b00), r11}}, 0x18) sendto(r6, &(0x7f0000000c00)="b6c25ee7f05a5261d3104a97ab6704ed0914f8b2ae47dfe5a7d66f79f5dde13db976aa16e33471c4", 0x28, 0x800, &(0x7f0000000c40)=@generic={0xb, "0f74bfa652b8aaadc06bd4c3c69b17a85b2b26cc1e12418fc69f497f3d7c214db8c925fa58cf07852ab581897455fcc85027b60fefbcf33ab70f60c1ad45a190dbc149ad3273f3bc663abc999394d8182a4f31274cb08b25d1ecd3f2ee03ee1f69c21b2eab2421f458acb07623aa734c7fa9d930ae89f1013d144172ae90"}, 0x80) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000cc0)={0x9, 0xb5, 0x1, 0x1, 0x2, 0x5}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000d00)=0x2, 0x4) syz_open_dev$sg(&(0x7f0000000d40)='/dev/sg#\x00', 0x2, 0x100) [ 234.881895] IPVS: ftp: loaded support on port[0] = 21 00:52:39 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r1, 0x80000, r3}) read(r2, &(0x7f0000000100)=""/58, 0x3a) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000140)) pread64(r0, &(0x7f0000000180)=""/50, 0x32, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x3d, 0x63, &(0x7f00000001c0)="278d0a5263beb9c001738902fca6a43b2da5629850ff2bb8ee4c804aeb9ce68bca3c2a2ab1706fea798c44ec499a5e12b3a0a42e243ecc5e6a05bbb0e4", &(0x7f0000000200)=""/99, 0x5d}, 0x28) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000002c0)={0x2, 0x1f, 0x5, 'queue1\x00', 0x7ff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000400)) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, [], [{0xf2e, 0x4, 0x3, 0x8, 0x9, 0x12}, {0xf701, 0x200, 0x101, 0x1, 0xf8f5, 0x9}], [[], []]}) syz_open_pts(r0, 0x8000) ftruncate(r0, 0x1000) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000580)) getsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000005c0)={@empty, @loopback}, &(0x7f0000000600)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000640)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000700)={0x2, 0x0, [0x0, 0x0]}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000740)=0x38c, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000780)={0xfffffffffffffffd, 0x0, 0x0, 0x19de}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000007c0)={r6}) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000019c0)={@mcast1, 0x0}, &(0x7f0000001a00)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1d, &(0x7f0000001a40)={@loopback, r7}, 0x14) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000001a80)=0x100000001, 0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) [ 235.276654] IPVS: ftp: loaded support on port[0] = 21 00:52:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x4102, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000180)={0x5, 0x8, 0x6}) r3 = accept$packet(r2, 0x0, &(0x7f00000001c0)) io_setup(0x9, &(0x7f0000000200)=0x0) io_submit(r4, 0xa, &(0x7f0000002980)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x8000, r1, &(0x7f0000000240)="640314e9fdd84ec96f1437c83c23bf58fd6fa9851d9dc9bef2328075aeb78416895a8f963b4b9ced3968e3d45376a63de856c8de269e7dce7b58167bed4796d308d899d57922a24f", 0x48, 0xcf5b, 0x0, 0x3, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1f, r3, &(0x7f0000000300)="2e38f4c97f491b880fe4c08c0cdfea69fa418fafbb706bb0b5", 0x19, 0x7, 0x0, 0x2, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, &(0x7f0000000380)="6f67af6fa680fd9ae161022976cf70bfb148e5bc6770a89e590b873a3b8b266c1781c2c6910073d37bc570181b472b64333ef46beaa63d96849cdf7c1d86f86b7b84fac0a7c091f7b639447bbc3811b621f490ea4853fa752e158e7758cc0fa91de03498502fe43e77ecf5aaa0cbd155cebc2e", 0x73, 0xea, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x1f, r3, &(0x7f0000000440)="a3209009b7649634b0d91967341b0ece19061ac21fb8de6ab3c4a47a46ac3417f2874530cbefb13e9388358154a03eaa92bf26cb5d75c0a84b4051ac6ac6ebfdb2dbfa24cb113a92b3842832271406f0a12f8d2ba3588ec8f8aeff5ed52b4d54c2db5d83ccf5653db45495fbcc6b82a665d4ca4d9eecd2763d3198f42638586d8b637956c7441abae1ced4a30593163a92e6027debbedd2919c48ad7ddd7843c31b8cb1b9d", 0xa5, 0x7, 0x0, 0x1, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f0000000540)="20f4e83a5bcf3375918cda28e8db95e51131e6b8b1079367bb95e1eee21a51ea1193953a02ca63c8c7f636f5a7333fe5219104ad26d75bd021a338f08762b6b7895abb7ae6c67a53eef10f128ca3692b1bff7048df8a673cbe4c736782eefd8809f6c29aaae9c26e7e1dfde6fe9dc3abaf4801ef5f94f93b04e806cfacf5d95210e72fb05cef894fa8401dfaf7d5c3f3207a93ed27961104791d6606facf6f0f6bcece", 0xa3, 0x7, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000640), 0x0, 0x9, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x81, r3, &(0x7f00000006c0)="e16755b81fb8c87ffb438e8d8d94440df75194774dd8158b13737891fc748eb1a8e8bb078e1826dd78f18c4aa1f1821bbdd25dec61fc9ad930c1514d82d98411bc8fcda246bb4e0663dc187c120768b5c83b7ce30e219a29e628aacfc8ce9a32c2b6d7eea79ba46c0c5c775f4aecb2301f0bf50f2603c634813354746ef9e676f418df948a5c1c84632296d839da011197de6d0e49ee52b4bacc44a06172a0a8270f5ea49ffaab1c44f293b5229023b85f717db06791d14e64b8b798c49b23f7defba8392af7806e2eea7edd84d5e88aedc3d8896469e8603c4266f5f66d6f6ccaef844cafeb92a2c1e8e9b90ee3af41551cf3ed09aefb3dd039f217c75a73a5f7dc6f7425d6d7dc7532c57e442a884a9639f61db1cdb827542790e34f69f1c8d9edb6d22ba26d10587ef61ef7d13edc5095ba3245c0b01a04b149f9d6056bd8e301ec17cd2fd13ddec4d78bdf68dc01fc7b6cf7bb0a4626e43b6155adcad284527c95cb7da33ab099179f83e9ccaf2a30200b5fa116ace589af7d6b4784478164959c82ea4eeba1c96645855b26abed095cd37576793e36d64e34296e73ddcb755fa663443f9685f39fedd5a40f987703f83002dd8f810dd3fc7ced709c76e932b25f6ec07a1e74b890d3b6090c7aad5e1abaf4ac917a6f6cb6f374a01e7fd24d5b41f5864a678623e7f1aff6e5cc036606f36c537f97877b13f9d1e9be409ecba5c5340b03a6d100c35a6dabb5820ab7fc558ddb2cd0a64c849d944d0bf99343b5ea9b6197c24e5a322b760d8a67f29be609192f4d0eb6bc67fa1aa76dc9e50f965229ddd62623221ec6c9725731360dc4733ec7777deffc6c67d286fe5bbd6951348bb0848a416972c8efe9f2d8cad5e7f3e3a3922f4d2311a99cf7787e5812ec289a77c7f324d716fa1e5dcaa00553c282fd7f85281b631bb4c75fe037677cd7fe1a30c47fa213eeca4630d729a507f242b585df687dae9e6fb6a33e415b2edbe6d89e82fb8d6a4a5cc7da23cd96f428c2867186ae9fa80c0542b0f0826fc63eaf4551c815de91028f2c4fa13016b0ba6a8be4d8fe215267875321978ef412c5aa9366fe9bdc7a0fc81b610c769f1048562cc6dd510b89b85c1e08ceac60055f3580845b9aff91ca6222693595e7561c3f4e054af7fe90c12721e47df731e12033b904c1efcf9fa62108fd56ae1e0203845bd8d914f75d14358d23e5fd28127d3899159e54f222c2eaabfd0e48f1f7606fe55869acdf68fa561758dabab1b78cb91f8511a388cc1a2fa06d3654cfedcd1f6d5a28e2f7d62110d023c8a3830640da4f2d50c306df3aa7942f3be234e3e9cfba2577ea63dd74437811035b7c229cbdbf58bf8f01944e2158825368727b393a87ee4a68853de7b6a34c22a4322b91aaadd55c287806ed9160695bdd8ccb9ab325be8fffec2cc52bfda02d6da676571eaeca7b5ef2c1403d2c63ba0e91ec43c78822e80b6fd8f6fc39b7d8f6a95270b717a6e452099c5d6f662b827c0a7bc054e211ffca06b6843f0341e907e2429812c5996cd01be682701e07b1805d38d58c86389c486be398770ac63ef579c4c737905f7eaa15bbb881e042a5efb524680a14c5e645a077c05637b6f6a28ba7e2fbd17d1bb70611937064a2c0cd5698c1a5e86c94c860f0c634d70d361c646640f7fd44814c04169cea822754feb047797ea1c7aa40bf73460d2d928af94b851774803fb0b954d6a6642c6ae9cd3163157f6151880cb3133eeb19d101ab7b5fa3d4b24fe26f3f9b3705136eec27f8f4ae8e2a32fd788b93bab4f140a0c35a64c9b5e4e93e3112daf70c5cd4cad27498b80ca38e32f80d9030f6e06aa5153d6cd31c650a1e7575b934bed65c856eebd215f6289e5584fa16a1a01f56adf243482a05a6ab27dd5c0845b18fa47200b89dad23f69e978e22836ed592b595a59323e268f384d479c37aabb4d9173dde06c11bf3fd6db08a34cd17d68aafee06f5155ae88f6f60e5d66bdae2c06d4cddf8a8e631001b741a47c839b555e199f2ae76cb7aaaaa5c64670611cf312ebc551e67ea9ccfd75878a9194b290e68257d102d801294401c9d62825df10a3cda7cf1abf5fdcde9eb8f224e2dbebc07259b85bd1d350573f510d9cd43de594f25d099497f102fda31da4560ab0729db116f2d38cefdbb7af60458c63a4fe42c23d5a7433384da5bd4a20f871e6f1e5f2f46f510567764631d348d5bb1897934d3189076a75b0bb072a3b25c6fd80af901b79a7c7cc2cb85c6cd8be7a702097b343abdddfb50c335aa140a22344252bc1118770fbb5cee72fd894f63c09a394cc42692d7ea6b8bdb8f4351b977e56cb20de7307678329ae2bfba26923c7e010d2cf982b5693cfa8e3a669b5babdd24aa752f2091baacca6deb9000c93858bc0661f72a840352b347f3c747007e1c967024351ae59e7bfb4e816d34619b2c6cb357daa1793894d87a85bd1522d895a801de6624d3a7c67be8a0f2a1b6bf91617dd47c34466305a2993b55019f011aec906c8936d9407c55b12736f0e24a2e2f7edac1b7a7b76fc566bbb5779ed368e16f266e5bbfb8b4c38a142879b6eb4bda082d61aa0a90b7c9ed6fd147cb46cb5b7ae04f77334b59aaed1fb13fe9628246f620faac480ba6f5c9fe5260469c9843aa3f8e9e8792df3a0267bdee012e91161c8f86b02f1b5eea206a0a198059a104de61019365f35075a95105fc86774e42f121f8b9466da1d1ef66bad0c8325cd4afff6f42adba0fe7216b976fe00d3a8296ab2ecccdb5b14b61fc0e136e9fcb0e51abf51a0dedf7d687c0b642f3b45833d34e2af735d99ce8acd9b63b4c3825dc5bba4deffc61c70438605c28ef059902f4dfd70e0b04a8e2ef02e8badb6b1472fb6f83f200c00daffefea35c136f3349a8e58af121761054ae2ad14f3c0c589654fbebef37b94bafe1041e38d590dea4bbec171a50bc859dae1a3677a674a85200a4b21fc740952bbffe489f8aaaa01b804b7998f7447a34dcc86512eaf18c5e57654d327a46c721ebcd56199b9580c5667fe6d2d20b6d3b0fa477440d714df14663849606a780c20855f866cb0ad3d5d8f6f2783ac1ff00e74c03626c5e824743a9bb743509392798bcf2a178ca3bd808e9bc4c3efd7e45923576b9a42360f694ae223e872aa32348eb4c71d309d917d3783dcc057878d266ca1170b9d8200a41ba7fa17068737fa867ff4977ca3a3208543c0359385b553f9efbb7d4cd29437823ff68c8b7ce16ce8003b2f333271ad4f29908f6527354a2c646a3db2f05a46ddd0070909c715fd51b5e33ea68780cee2f9d6428cc91c6359e1941106a39df822210eac217386d3da1bcec3637d525277cd8f883cde22f6614ffe8a1a59630870a8153d974992b5b12b9485d18200b38191cf4eaea0b2ddda145f5ec0376f0ecd5daa68b86cef74f381d2d30584c551ea80d8f26be716e31da9cc4ac96654db5276e26c4946bed20998bedc4efa578673d55047fdcfe0225ea1d383e110ee517978843de1d3880ad4f2477e8353a7d861a5e5159e614c48e5205cccb740eb779d50ba3c055ed21236bc798e8071a112b3973c50f113962e56238c87bd39eea327797e9be69207dc1d70edcc50f50c0efa6f0cd1e7a023012dc937252be4279c6c90da7f5ed29fb14590839573363d8f298d536492c851d398c57aa6b1044d4c73b1e99c6efd0ca2691c70946aa6d2dbe5a301bef6bf92870265c97584aa9d194ab6fd9b9907de12d0a701258d5ee3f1611fba3c9eac847562d61f554b6af7506240954ae369aed32fbd91a85cba732dc03f02a6310237d1286afc3a2d8ab4cf9d0c7d4cfbce9306c7a79276e4cb1e6992ec0656b3fc847b585ac76de514dfddeb570d04b46feead07c03b8cdbfd77464fe6a5a4e4c594725249432e9352780e00ab165f9daa81c1986b8d1d79f4ae6ad6c4d4664bf55d56e27cd33f66a4e5ebbe7aea9ce4839d21fd704b092b7aba7d3eec4d5e73cafb3b33790b2002506e56e11e478f7c19d4b1b5e4e677b2bd615f10395121f6ec08fc526c9c212773ea4937239459ebdab2d8538d5ce74a6434d29043f78d22145106822499bd770eee651bec3f9d3be81c7a874d84fcb7f657dc32eb3662c2de51fa873ad4c425d795b1d16828b3f3b499e63b4604c5ecdc29da4a488312040fccf8b4b3cea85bfaa2a54edeeb2429b7e611ece73e5fb78fdd3c9d2c94aa1b2ec50446b631acc057d39f11a8299d9046b24596fcd098fff5c8616fbaa5abb5674dc8c1571f0bb43afc34a3fa4f5e11d43a87f4252c58b358b4528ed99d8236a48daf6b54a65683dedff0e1b9212dad0ac756ffa1591229ce2b69c11eb2e86cd4b5ebc3c1042c2a09dc33e5c32a3f31fbd5c03d8af79e83aa28c00cd633e5e0c852c9d212b1adb89e250eafda755680d90e3fa8dbeb1c92d8969de07374957d8209190bd0151a2139075c4c0edfde1f39f06e777fe0eaa2730dd8c418ce173d6ee93a43be62a0e0df92b47d1d6a9535528fa79b1ad047fa5366cf3f24cccb8c559822abb5ecc5ca3a18ad9c33e4e20f10a226153558394f3ec69848509de1d3bc3ee877b66cb30a549927e39ab82db1e941a5ab57ebbf0ba44934becbd4c83a14cc152bb6422bf3e7463aa1f4f59905544a7d7662ff7bb63758cc73a6a0705049a562f2e06f49d37828516f0c269950d9ab55570ddb9b21923862ece81fd51a31862fb1b70f4e37099c16c0ce2377585b81bdac0f5dd029a1502c2a8b680ef4c67e280980a98ae0fba8296b1325d1807289eb256f202b9256f8fbc38430c15bde3fe0bc7c1b51b188b45518cb1069190aa4069946e93084eba64648895d53a90a6523e7829ff34b00d9fef71b984a211210af1f2a26155e422ea2fdce3f51713e4ee214273bf7cbd4acade2d37eb8964f3debb0089d2729ff0ca8e183b107065017344aaee2cf483d93e27487edc9c9e036b6260ca324b95230dc1329fd8afc13e3d8e0702c019691661a9cd78fd87cd3fb075b207c3ef82dc1807335170998d25cff21450b4b6668eca79b6ecaca38366b925a214016d9b0a4c57df3b641c815ddf20b98ba9bf2f5314a0b0685a02bcc872d1c92400f33ff7b0bc16679d8dea6144314cb1b121b15d5f41679d989d33f5e625d25d95ce3a54e370308956c761e21f54fdbb5a3fa6257dab4e4a1ddcc13352f82059e351fecf27563dbb38d4ddef677c79d73034a512f8c0962b88f5f7eca92aeef11139d63d0d6c53af1890283dbf2b1c0c7eea37340ce7d6324c03a7f7de7be0f33dec062728d116768fc4aaf6839bbc512ce50315b58a7c161c030f6ce9ea43b899542561657fb329f2b38a32a7a7498ad83f44c06ade97dbf32dd8bbb7ee3b0c81664fd50954f69931c3e0506a6bd37f6366900cb5dc45817161a4af86234897e5a8a3cf134f82940ae76672ee348b6e44a6b62e898503621682b09bb8959f757b6403c29e015efcebfc4f7d1a2d35ebe33e67a2a1d00b6ff8f3d29139aa60436d14973d2599ab6fa39c388924152bc7facc50bf6bd432991e636216388f31b76e74632c534c2c4c9bc1f5242f6d69143c54ebbf3b34387430bd8cf9ca287157d9ca49a8d4a177171ad55cda6d413587a020f459d3be9fb0c820b9c6f0151e1fc5a45ac7f0452be24809e6a603a63c950e55784b79b5821c081f6fea5f180a505a7aa067793d205150adaa62ab611342ec4a61c450d73938cc04d594239a49aadfbc622fef47c28df30612c6ddfa61fb893fb119b4378ce123", 0x1000, 0xfff, 0x0, 0x0, r0}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x5, 0xffffffff00000001, r2, &(0x7f0000001700)="a9ebd1d54efebdbadac9c4efbc25db11d8c1ed29c097608ee47a656c6c7a5c84b93c00f3cd34f9da651a80aad5217c098518a2834dfb15f9d3a361b7db8657122603f1aec72a2c3496d79c164a0f96b6a0c14237f11adb769dc778cc04b4874f588967f5f89269087b4b9b7b529cd5021a1fd12a16d922788b28a9e93c3f0fb54dca43ff3f9eca55da75d8ca0348f6782a03d81beed1785f6bcad8733f8f48bf0a3d389e24ff20e70d25a0a2b670baf1e50ed666d9ef3a84008c98280f69a946489a548d9952257cc3876e31a48652c8f44294c040a7c89417f16f17c6790e909afef142bded9ee79067daebcaad1ba6cd8b3a5bc8bc218cf5180be517e4345a01444c0238e9abc9b0cae761aa84c113bbdb93781ed8d7fdff9b33a387981809ea9379dc64cd19c6deba84b96205ab206509a76bc64c985f6b72d05cf05792ddad349ec5cce4e1bd9da2b6b03a6f903f7899f1253a366fd3ebc460221aac2619673b7ad8d666953f7a60667a2b00a0849ed6a4942be475a8701eed6b87c194c9d4ab587c8a5946370fc94d4294abe2acedd7ef582a069997a699e0acfd9d675adb403b674ca640edc3981d24a08c2b09b42e6ca608393c75d3cc60d4da2aa1787dded8ffd831c905cea86139a026847ea3220796c221f246701d5b2dd0544f7281ba33aadf606d6defdfe1b442a9c218764101977f52fcf460dce08f6ee7b53a15b8eb536519179c2c5d9149056934e10563f0ad167bd6f52a751abe9ae250c5e850ff2ec2c8b8945f2e8b7b65148b1f1bb071733e60575977f76ebb45442941d6241512616d3f9bb6c60d9e7446496a40c529cfd740704a3e7e99117f99a03a2b4a6f3f24f7f0499cafb41c47f6befedb55643a7036f57ab9dfccd2f4888559c09ec971c924bfdbc3f1c8c28c03ca19e1762fa678a05319da718029c9ecbd09afde85b682573b306e42b02bbc9353071c1e782d82281cddb53b6521d827db83931c2364387241b8c06e47b271b02cbb974f08efd8fba9542e77919d79afdbd248e62247348d76cdbb48e75f76c7cd797559d5217b58bfd937c75221438b69cc55aedf26979f3a0919007e970029d89b49ec1ec543a09e1729c586a1b3aeaf7d7c59f08a003bf7997d99a6be44ecab44087c1040d58b5dd085ce4651f574a4261e0cf32e61dd48e7c151e2396860ebf6cd1180dece83fa34b4c2ab2483a8a14aaf8dc761b8820a211425df449640ac5b16bec28d18fcf5efe4d0523cb55fffa8925531c9088afdd3353e992fd89fa8ea62670a90be61832a4e934db8191fe0784e803bfb8b595ef0bc9122ba995a2c36a2a104bfedf12a26f5cf64cbd7e3adbb4296f64e931767973e1bb5902279ac795937b04e49ad1ab1d6aedacf7405790167f0cb93481f32b91d7cba26485b5cc9a9383e4c4ece251c669cf5e4fcdd21a8b9b0c122c7bc45827155ebf3ad6f951efac154e85fd4140dd57ad559c1a1a1567922ebf7f60ca56cbf8aff26c8372d53a084efb3abf28168b7d8c77713935f2cff3b26efa042f94caf678388fab78d1b6720a472815ed1a8c3a1e151201e9b00aeb964e5f7e51f2692450bb18db78aa6ae9f3bdedc8e7834962fe47a27e70594ab15ec8556d090541e704bb850407f1a5904c96f295fe374cba4f9de7301e17f0f77796cfdfdfd39f05b31c2ff638a213d774f133cfba49d6e56a3a1543994578011e129b7de3bc7d5aaecacc196e28910a7d06785899221770bedaa19a7d26c1822a97a720889dda29e7167d23f1e5b78969644349c390d2b9ea5831306640ca82fefc1a489fe935f17c7b17850e43dc731dd434ae499fabed677c41a88f2283a1d268d5aa08cd57c1d2c460aee5d39a58211c4f3a061d4e4512878d6a30a7639c2cb244021bf3db19e373d3ee10cd486d55da247601c30140289c6146383e2ca47463b12bb67eba84139e17af8b9e5edcd7ea78595fd48ec19e7be603d3506009f293b1ad428f5ce3cee2866d32c0e11bb56c210b4a0152364c1412cf5679d274d322a4c7146a4c6aedd623f5ef8ae908f5548eff732b1fc9c80b46aa0ad39af05d90895461cb9c34e9b39e10194aa16429ff925accd209827e6a10cc03f75de4170d8f1835cc75f103ac649c19234d322b268dbf632d771f0578a87b3b76ddbb492219d928cf59e4d583edd3f3c07adadefdcb3cfaff463c4e29f95260b27d3bd80715bb27cd81673679a3dc6024c60ea6b6f3a7551638357eca14b84f0c42971165ae4255a7e509f7871d3336db3ae780f19f3653e26d9a683341a5f8ac68547f8255e8de38d86fff53635a9817da41f30a50f26c83d667e9bfb831b4e3308d9c575b42b02bcd3eb3faff68d91d58aef53d52e9c3cdfce96b402bcc6ff2c4938abf6050a01507da6edbcf8b911cfbdcbbfb3881e190946a8fffd80db5fa767f5744d2e0e1ec4f7074d0e6cf4475cd9eae3b6970d7bb3e9a7c8c221e7963fc003c8f5cab601ec90e4df37e28bdb9979a7b09938d4f8276b59efaec72b40a1ac4d8eb065d9302333a2b256ed11d5f5e52bc7ce1d422ffb4c41eead787297bc198ed6a6baef96859e5070a33677af1bcea42406fbedd4f3e3041d80420f331a6f0a64de77c453f402f4bebfe06adf685ac0b54af61d33851cf5228b77383f15e39d39b3a3f2f99d3ea158fc84ff9d51f8638b4309f888a164fdc40fbf28d2bc9bcbac8a459cfb455b93c4a5e9e055f4b6199eb81615ffe60efc6416530003ca97561493f7edd9ed7e05d3f2e3c99a8601a6dbf357213a1552066d01207b9cdb160307d16ef00ac24b7f8a79f63ac04d75e69dfae22b570bdedec6ad4ca2fb47fc0325fd8abf034af0d7d02f954ef5a7fb16c5d9a96bcc255152250c2c4a2902e6abd2fd0b7e79bed548bb2e0dbfd9d13001957ea8978b2cbfb4571df79b4b84fbbe335c1539fbf24ae77bd0ae0c1dadffb888fc53880f2fad84f27c6475ec8e5d3f7d168957b534031dca6741d444073d227240d4aa9cc4e4597f467298d8bb1cece153dd8213d2d3753400cbb43fedc2d279ed8252e65d612040ed239027700e79d5e6f686d19e15cb9702d6c27533a6063be70097ff7f9c48341029daa47e65cd7482de70945086876e3749c0b4b142a66f07f93514b3940239ee526d9020cdfacb3a813aafc114473da3aba1f940fa47a917f8372e7040e77a0d95446ec8263a5b5125e4e82bf61d8ebd3bdd7785374fd85399c79fd1e0a4da8cf5957a3ee0a70dcbe3abbb49cc3e0e1dc63e19e6cea55e5b1b2488bf66d5463b096d6641c6a54ec48cc75c82340dc2c4123ef8246fde75ca6a90ede59a12aa9db7444cddb0c7ae52b25574a0138dbbd5073f0e65360dd8b5ea817f208df2cc92938275f054ccd3d81a04cdd06697af6d57488dbde6e3bbfe960d7e5f13c223ac736271587b997933dc19d884add1c47664d2acf615337fd0d4ca79b4a3334bd9120adde43d0be5b2ab538b01735a07147b0942ff3e1b176a9f12f6b145a813e67089d6974f7c5a13f9f2d35254edffbeeeefbf8883593dd53209db13bed957fdcc7d5e940ca6d2eeb3f47c8a03058c64eeea3925e2c4f3716725cbf7275b34e1bd3fa80fdc4be3cf4173b51ed7b396be56901b7ce5bb9b64ed1ec00d503a402e99621930ead577cd4c26e7d43ef14e3c76c9badb27649f31efe4d23a61fabb0f660d86f52795dcff8a6edaddbc6a423febadec47f375a158bd7f7ac5f23999e81f3142f410080be434634055694821d9516c53a6f2ea4a7b6fa5308d84beb4a709a3cd887c1940d0389200c8478f92d1b9901070110496cdbcec488509a04e28ec516109359349092889fe7cd26d9b8dae56111a07af4cb95d4817705bf3a07aac53c45fec206ff5edb3e4c9267aa9de9aaf76986ac869dc66df50347395da224f1560ce01593f335b04a8f1df56db2ebf41b1049b478dd286b37319d33715b63e92699ff25647d1e2fb75517e95927ea171f1eab54c53dc045626492110a2e82ce6b0e976b0f51c9e9cdfd5558dddecd093a3137793ed6f047b9627bbb9fee381e592e11682b6c516d80fc958efb7f6edde93be4500e976c7293fba8197f738d566ebccef0041840379c8470400575f263817109a6f642708bc23a72ab0842a46b8ae1a4b41afd743cc28649a4783c6e502c83c67f1e4ab6025779adbf12c4a16056dc038bf564922308c5c12c4755667fab697170e48348ba7aa8b6f9eff2e0f244766e7da8766be2b187e070a60f8c33a10ab43a71f05026b12f88c4a271c410b08f232e3fc46f53e64fd06370c3ff5fb0c7501812914fed4b84b242a2fed389c26ee1080fa392512b5e774da4c90bf8192a8ba0ac1e7e3d8acbbfa917b020878094067105f4ccfd7a87b3720cf90d8eb6f3442b48528267ab09daeac8aa96a2e28afb94982a1638105992c471dedceba0a74a609f41debe2cf37248dd1753695ed6f0a28cf2aea7c48166e17554dc9f1e2d0888a652ea2c3871981452ff0c2406902e6113cb04def90619879ecfbf40194d57eeb729fbb1607895f5556ead36cf7f0d144f06e193b0334041e3118f7034d6136d91714c89df67f95acad9487a9efc7a023f27c98cbfd14d49078519b63ca39513156f70beeb89c3dbcb1699c90c38cc58377589702345a871e1be0ad517b19f6c8b1b8323ec36d9d545ff890560541084b8b529dfc518bb9c0b8de444ab72d9e5c3a57813d8210da1555f8e484e17ec829ffae9ac8a2d336a46f16b27e107309d0ecc52c1f0c1b1112421ea638b9718d82e8e02ccf6b8ff38ada4aeb1b33c3f7471b0954d79bd8d142fe5c803759fccbeddbd61960344dcdb70c73e7277fa3bb5d05d48011c669271000813479da59817da703ca8298dca75e31ff846553e096d381412be3174b1b975d6de087e2aa5834b18977cbdf6079174c44c8672b3cf0babbb79759f684cbfb56067ee3d03c62775e1b8e90e4fb80ec0bd4cd9eba8a36044afb39bb7228c458bbbf0a497e167b000999c4335353e4c082976b65cc2a7da92ed87d0e9c104bb46832e51a11b4d94d11d3e9bf9ad63213aac7f347ee1d4f518016f94888c12ab9eec8028bb09e0826c3f88299bb8a1b3b0e1833f4302425e82f011aadc02e1d5dc1b121bb7142570517e204911d13531d51371ab2aebbf2b796e6b5e51b90ba237813e611094344f180411b0abe0fb31dd3bede12df14068cd4bfafc61c2fde49ba14ebf168e6b31aaad5ac298cfd8af6a1d96da3ae1d0d06a5ce7e7b1f478831089b2eac150d291975e4c3317d449338842b27eafc89b44c529c6b460204ee4a8c83d9b6d63565c0e5a534e070659c21491ff861b358c7c7a501de15aa6540afddce1436a1a09c72b497eac91d0ba1b153afc09e1ffd02eea0c4afccbdb2a93bab560463559d6f6e1748138142a12e7ccd6036327c488df161d971df3f2f82dfa73171e30e8e4042ce18e1f75d5c52a20b8a2bccc502d05e1ecee73b36f946cca5aaa8f681f5a89d40c6044f07484d393d6e029dd5670b08be4920c7febb67b316e28e20f3b7077d0934e30770d5507202bc5d9d3fa8a07f49017f9e1a99240916b742bf90a73d053b6e87519a52d34e5f6d93fc6471b7a0e0d6f4b8459e0fcd14471226143c9ff6e7d29de90a13d1637cf4b661700c544522cabc5e0a4e879194046281e6c77690236cfd9f94d0bcfabe74aa585a92926b9466b6fa4a97759da37d99d2ba35d66fcb708377f151c472af6133671637741db4e07b021538a2fe1e3437a34977", 0x1000, 0x1ff, 0x0, 0x1, r2}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000002740)="4b43066fdebfec0cef6a56dabf1c8eb474d02b6e44928a3d07d4541f21b50d6215d3aae34103d9f7e3023a8f1bb9c964110f7520ff9ed775bed5a05f52fcb66c23891452aeb51cdca709ba9d31ce127a09297c3d43098793037c6bc89a8e3e3a04480e3c47ce6377cb9b3a2835d5322149ac72e4b6906d07551c4780b8af94ff812804", 0x83, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x5, 0x9, r3, &(0x7f0000002840)="3749766205c0a5b4fed5873dd47a6dbe6b5a4f73164195ed544b4fd23219ce7219760fa965123f0dad3c40408f43f8d48e1776102048f0c83c7b3d49eba2be7a83cd0edd0d49754051ea027711f846a9712629461e332dfec4844fe35e93931b825679582a956506063dcf5b8f116fa12fe6a57bacf75f37a665edeb0514bc1b6ff95cc8ab72cb0ab7472228d1f260c0d209bd22b4f3a7e52fa39ea7afbfed3856652069746513906eb51f893f17428dcfca16a256055ce0a016f64e8748ea20107544eb", 0xc4, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000002a00)=0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002a40)={@remote, 0x8e, 0x2, 0xff, 0x2, 0x6, 0x142, 0x8}, &(0x7f0000002a80)=0x20) io_submit(r4, 0x4, &(0x7f0000002ec0)=[&(0x7f0000002b80)={0x0, 0x0, 0x0, 0xf, 0x2, r1, &(0x7f0000002ac0)="e9d3f28fbad624cc6ca2c079e4a2a5ca83f7ae8d1335f9d4e108a1a35e8837358490be234edb33f6b68fddffc1c43e7e56ca8673b4bed61c46ce3b062b8cc805faa38ee8f04c82f263501640ca23b18527f7719ba48656d9a8e43ed2633e4e672c35a671d57062f665818d1e5b9030c2aa40286b279d2ae62a02bff13df4c6fd6ad998a6bb2e36ddf6b72ed5d9de9915ab6bba9564c0934426df1253155aa9c5e31cccac0660a4", 0xa7, 0x3, 0x0, 0x3}, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x5, 0x3f, r2, &(0x7f0000002bc0)="39678cec3f602e0663c98e08ac04768c835e108c1771ac2166a1dc225e4a979b46c6db6e108c3181701801e72a6dc21c08703d4ee13c8c36a9ab1372410423e9c4e9cbbf05165d7940fae4d61ea4841c37c0fb0ca7e486fac531727b47c46d9d6aa6d25849193c78c69ac10594adbaeed95362c785e432549f0db0883944dab2288a7941ce5df24eefddbb236651647dc726ea3036f093d534b1db33ca4eae36fcb5e384873f2f68b1e4bbc1132071e84e9bfb69d9a503fb2a2be3399571909c29e9375b27f3fb2f5ee88919c1caf9780ea82e0474fe1bb1a98af0f4d102e655c5b7cfc25108fc8a81b9970b7460", 0xee, 0x5, 0x0, 0x2, r2}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000002d00)="7ff386cf43535ad0015152f09cbb8252cd20ef9145569901669173524c385cef636b486aa8118ab1c9a61b0ab759118efcc1f387ffb6d1d70f5df2493223db0a1a44757426", 0x45, 0x4, 0x0, 0x0, r2}, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0xa, 0x82a, r2, &(0x7f0000002dc0)="6fae3a2145c103c176315a662d2277f128df27620ced29669b77148c774dd6a2343b1dabe9b830e5dda9b4dff0d2f425f6abc98ffabae8416347e6d408ac5750d95a3d1ab90bcfed8cffbfeeb7c9b04ee810603ae73070896edeeab955dc3fcba25475006022978a174f340c0b241a0fb9d9cbdf899cf58c4c4d1146ce7ae7252829f61e297e3da2fb5729fa02dae10a955b9abd5831238fa00cc81796912c9abfc4d98861fa91332573b27b5cea3dfe192c396a16fdbeab", 0xb8, 0x500d63ae, 0x0, 0x0, r0}]) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002f00)={0x0, 'team0\x00'}, 0x18) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000002f40)={0x401, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000003080)={{0x3, 0x6}, 0x4}, 0x10) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7ff) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000030c0)={0x8d15, 0x4, 0x6, 0x0, 0x0, [{r2, 0x0, 0xfffffffffffffeff}, {r2, 0x0, 0xa80}, {r2, 0x0, 0x5}, {r3}, {r3, 0x0, 0x1}, {r0}]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000031c0)={r1}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000003300)=0xe8) bind(r2, &(0x7f0000003340)=@ll={0x11, 0xf7, r6, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) getsockname$inet(r2, &(0x7f00000033c0)={0x2, 0x0, @loopback}, &(0x7f0000003400)=0x10) io_submit(r4, 0x4, &(0x7f00000037c0)=[&(0x7f0000003540)={0x0, 0x0, 0x0, 0x3, 0x400, r5, &(0x7f0000003440)="9c935c682e45b328ff11d8904a32f542ea4f23fb9227ab8b579d3e67e8ec83f18bf79560c9fe9f5e2cbfb2157203298175b7075ef0e0465cb82f89cda79da21fb5908ed681584dde036ef2dd6f6c7ad321c0c93014c366b92d9c856874db785beef55239758bfbe8cc47ae1cc92dcb05c19b3d3f0ae79165f77ce5e54c7a80f5ebf865a90cc385a3cce48c46f4a442922eb87031cdf84837b6fbc7e2b432751363e069c9ade4d349802087acacde72d4d2c3a373c77ffc8e384e301bb2626d5396988dff3203bcb85ed47125fd8987eccc8a3e1825668a2c4673ee46a5d006cbc1ab4007ccaba4d4e59b2ca53d9b3bc9f2cfabf9f7802314", 0xf8, 0x10000, 0x0, 0x2, r0}, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x3, 0x401, r0, &(0x7f0000003580)="beb9ea59ce1af7a9077e7f7eb08c4bbc6fe92bf9309151336591ceed677f8ee341c807de0508eb50cbb3b9e570c44efc8181adcdddfdfdadaf7134dfc9ec8fbd69f838e71fcda8d40bc18a98e80b8d5bc020393802179d3bbebf7b5f2fb34e8bcc327603056b72556298dae9baeac1132c83997abc39b9ef8e795c1df1d1ad038d7c7c6e8bab9172e0678721b493c54698d14d7ef71c92cf70023d79a96f5dc29d9789c62eff1711b1ee", 0xaa, 0x8, 0x0, 0x0, r0}, &(0x7f0000003700)={0x0, 0x0, 0x0, 0xd, 0x20, r0, &(0x7f0000003680)="f618ecebc529e47cbb94c93bcbca3148eb423d55d3949b4e15b1eb1b093a439bbf2e74f8d7ba88fd243723ff5f3eb3f8d06ad1e3b1a9e052b2813ea6bfd007f3126e321d46871cd47bee6607a6ab061042dc7066882320ac01c0d9d82451b325d614ee", 0x63, 0x0, 0x0, 0x1, r0}, &(0x7f0000003780)={0x0, 0x0, 0x0, 0xd, 0x80000000, r2, &(0x7f0000003740)="10bcf7447c24e0a0ee25be", 0xb, 0x0, 0x0, 0x3, 0xffffffffffffff9c}]) write$UHID_CREATE(r2, &(0x7f0000003880)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000003800)=""/120, 0x78, 0x484, 0x2, 0x8, 0x61, 0x1}, 0x120) r7 = getegid() syz_mount_image$msdos(&(0x7f00000039c0)='msdos\x00', &(0x7f0000003a00)='./file0\x00', 0x1, 0x4, &(0x7f0000003c40)=[{&(0x7f0000003a40)="9ecd423b44ac9dcd8528eebeaae5fd5d2b6e2cc355e4259609f64b5054f3179dd895292d8a1ff504e8e791130a8ab175250f54a69ec02ca4fcc034464a6c2867723b0f9d8dd5bcb2c139e30be2cc6ac813586ea0d3d19bf23230b1358efa2221c0abec2cc9f210f5d15b10f81cce9957514571817c47fade1ad7f12b22487ab889a1d0987bb2093a5c947a6f655ffcbe597239896dd997fecf", 0x99, 0x1}, {&(0x7f0000003b00)="486e6cd046c1743d848a25a2c857d71944ee3dc34ac3cd433aeb72de3665138e3b76f4096f9c0fd750b8f028b6f52f447cb0517b63cafc75838b7edba785c0f3b6e5abbeee47fa184252ae757bd8dc0893d9be1cce6f03d65039020344fc3bbb7254c8ee9e05a61ff45ccf4de77a8a6e14fefdf68acf79", 0x77, 0x90f}, {&(0x7f0000003b80)="152917846911a92f84b2840a448290faf686fada8ead718057733ca47c6b18fd47c4e86ce558fef17ab851d919dc2ba4ece47efb5073533c", 0x38, 0x8}, {&(0x7f0000003bc0)="ffebb5ed1d5d170c99b6a11806382e75b9bf7c9af0ffe2af4f2d6ad2c7dec233989304c8e5725fe7cae001d6a8dedd43f4556c02e066f4468f302816bd7b11e8d962ac7d252c070cf7a6f217f4ae5aa876a8ad20c8162c4521", 0x59, 0x7}], 0x1000000, &(0x7f0000003cc0)={[{@dots='dots'}, {@fat=@usefree='usefree'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@gid={'gid', 0x3d, r7}}, {@nodots='nodots'}, {@fat=@check_normal='check=normal'}, {@nodots='nodots'}, {@fat=@check_strict='check=strict'}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x35, 0x66, 0x30, 0x73, 0x7f, 0x38], 0x2d, [0x39, 0x7f, 0x38, 0x32], 0x2d, [0x37, 0x0, 0x32, 0x30], 0x2d, [0x3b, 0x61, 0x0, 0x66], 0x2d, [0x67, 0x37, 0x67, 0x62, 0x37, 0x7f, 0x38, 0x36]}}}]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000003d80)={0xffff, 0x80000000, 0xfffffffffffffffc, 0x100000001, 0x6, 0x8001, 0x3, 0x8, 0xfffffffffffffe40, 0x4}) llistxattr(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)=""/57, 0x39) [ 235.829397] IPVS: ftp: loaded support on port[0] = 21 00:52:40 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x1001, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x301080, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x42) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x1, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0xfffffc0000000000}, &(0x7f00000001c0)=0x8) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000240)={{0x7ff, 0x2}, {0xc0, 0x3f}, 0x3ff, 0x6, 0x1000}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000002c0)={{0x3, 0x3, 0x4, 0x3, 0x4}, 0x3, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0x40, 0x1, 0x8}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000003c0)) io_setup(0x6, &(0x7f0000000400)=0x0) io_destroy(r4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000440)=""/20, &(0x7f0000000480)=0x14) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000004c0)={0x20000001}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e21, 0xffffffffffff0001, @local, 0x8000}}}, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000600)=0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000640)=""/213) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000007c0)) write$FUSE_STATFS(r1, &(0x7f0000000840)={0x60, 0xffffffffffffffff, 0x4, {{0x2, 0x2e, 0xd1, 0x3ff, 0x6, 0x4, 0x101, 0x8}}}, 0x60) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0x80000001, 0x3ff, 0x0, 0x8a00}, {0x2, 0x0, 0x1000, 0xf9}]}, 0x10) recvfrom(r5, &(0x7f0000000940)=""/249, 0xf9, 0x101, &(0x7f0000000a40)=@in6={0xa, 0x4e24, 0x3, @local, 0xffffffff}, 0x80) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000b40)={@in={0x2, 0x4e22, @multicast1}, {&(0x7f0000000ac0)=""/25, 0x19}, &(0x7f0000000b00), 0x11}, 0xa0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000c00)={0x4, 0x2, 0x0, 0x7, 'syz1\x00', 0x80000001}) [ 236.143517] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.179845] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.187648] device bridge_slave_0 entered promiscuous mode [ 236.353924] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.374353] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.388523] device bridge_slave_1 entered promiscuous mode [ 236.459402] IPVS: ftp: loaded support on port[0] = 21 [ 236.528077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.668331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:52:41 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x103001, 0x0) write$P9_RLERROR(r0, &(0x7f0000000040)={0x15, 0x7, 0x1, {0xc, 'em1nodevppp1'}}, 0x15) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x4, 0x100, 0x0, 0x9, 0x5}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0xf4}, &(0x7f00000001c0)=0x8) setsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000200)="25c249d3d261aba190dccd481e6aecbcc1874265f8639f22ea04476225afb4d0e96b201c3781afadcda891ea6a7588c98f19b231ae6d3a6886605cc06cafdc5e", 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000240)={0x18, 0x1, 0x0, {0x8}}, 0x18) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000280)={0x0, 0x8, 0x42, 0xfffffffffffeffff}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000002c0)={0x4}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000300)=""/61) getsockopt$inet_dccp_buf(r0, 0x21, 0x8f, &(0x7f0000000340)=""/193, &(0x7f0000000440)=0xc1) write$P9_RLERROR(r0, &(0x7f0000000480)={0x11, 0x7, 0x1, {0x8, 'vboxnet0'}}, 0x11) r4 = dup3(r0, r3, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000004c0)={r1, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x3}}, [0x9, 0x8, 0x9, 0xfffffffffffffffb, 0x1, 0x8, 0x3, 0xcd, 0x8000, 0x17, 0x5, 0x6, 0x2, 0x1, 0x400]}, &(0x7f00000005c0)=0x100) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nullb0\x00', 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000640)={r2, 0x6}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x8, 0x8, 0x2, 0xc0000000000, r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0xffffffffffffffff, r4, 0x0, 0xc, &(0x7f0000000700)='em1nodevppp1'}, 0x30) ptrace$peek(0x3, r6, &(0x7f0000000780)) fsetxattr(r0, &(0x7f00000007c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000800)='/dev/nullb0\x00', 0xc, 0x3) write$sndseq(r7, &(0x7f0000000840)=[{0x0, 0x200, 0xa71, 0x59, @tick=0x3, {0x0, 0x8001}, {0x5, 0x35}, @time}, {0x0, 0x1, 0x1, 0x8f, @tick=0x9, {0x7fff, 0x401}, {0x7fff, 0x100}, @control={0x9, 0x7, 0x9}}, {0x200, 0xf1, 0x6, 0xae4b, @time, {0x1, 0xffff}, {0x5, 0x33}, @queue={0x9, {0x5, 0x8}}}, {0x6, 0x6, 0x1ff, 0x0, @tick=0x6, {0x0, 0x800}, {0x1, 0x3}, @time=@tick=0x8}, {0x5, 0x1, 0x1, 0x10000, @tick=0x8, {0xffffffff}, {0x80000001, 0x8}, @result={0x80, 0x2}}, {0x72, 0xffffffff, 0x300, 0xfffffffffffffffb, @time={0x77359400}, {0x7, 0x8}, {0x1f, 0x5}, @addr={0x96cc, 0x80000001}}], 0x120) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x8) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000980)=""/105) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000a00)) syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000b80)={r5, @in={{0x2, 0x4e20, @loopback}}, 0x2, 0x10000, 0x4, 0x2, 0x6e9}, &(0x7f0000000c40)=0x98) getsockopt$inet6_dccp_buf(r4, 0x21, 0x2, &(0x7f0000000c80)=""/52, &(0x7f0000000cc0)=0x34) ioctl$FICLONE(r4, 0x40049409, r0) [ 236.750196] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.756682] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.778094] device bridge_slave_0 entered promiscuous mode [ 236.928694] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.959980] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.970225] device bridge_slave_1 entered promiscuous mode [ 237.089428] IPVS: ftp: loaded support on port[0] = 21 [ 237.121652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.202971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.248471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.348299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.457923] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.464542] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.472723] device bridge_slave_0 entered promiscuous mode [ 237.603155] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.619792] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.638006] device bridge_slave_1 entered promiscuous mode [ 237.674774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.754967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.823212] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.876198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.923781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.938652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.076497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.121883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.137583] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.170631] team0: Port device team_slave_0 added [ 238.289226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.310398] team0: Port device team_slave_1 added [ 238.325717] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.340325] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.347747] device bridge_slave_0 entered promiscuous mode [ 238.380863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.431966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.456146] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.496408] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.507897] device bridge_slave_1 entered promiscuous mode [ 238.530173] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.543597] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.571030] team0: Port device team_slave_0 added [ 238.620747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.679829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.697730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 238.711775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.730014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.748748] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.777638] team0: Port device team_slave_1 added [ 238.785474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.803533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.817814] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.838263] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.847353] device bridge_slave_0 entered promiscuous mode [ 238.869776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.887768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.905641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.930597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.938629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.960510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.968573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.986960] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.000525] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.008520] device bridge_slave_1 entered promiscuous mode [ 239.017839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.065116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.090529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.148951] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.156872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.177696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.204333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.250659] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.270049] team0: Port device team_slave_0 added [ 239.309839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.317147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.327058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.350803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.407473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.417399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.433773] team0: Port device team_slave_1 added [ 239.592105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.618165] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.640753] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.648679] device bridge_slave_0 entered promiscuous mode [ 239.657666] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.690560] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.699401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.777305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 239.789794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.805593] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.819906] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.827684] device bridge_slave_1 entered promiscuous mode [ 239.845738] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.869079] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.891824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 239.898646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.930791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.957245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.974010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.999062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.009378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.040797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.048678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.072646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.110179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.117121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.147021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.417446] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.445461] team0: Port device team_slave_0 added [ 240.521912] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.529420] team0: Port device team_slave_0 added [ 240.567609] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.589920] team0: Port device team_slave_1 added [ 240.622816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.646198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.657774] team0: Port device team_slave_1 added [ 240.717671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.765039] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.781830] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.788321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.795393] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.801808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.810630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.821926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.829727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.837675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.872321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.883812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.910713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.920738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.950219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.960085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.967890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.998917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.010854] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.017224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.023923] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.030339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.038388] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.047581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.068320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.084744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.100379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.107957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.157638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.181384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.189416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.242386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.274051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.297684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.359946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.371592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.400017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.453058] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.468812] team0: Port device team_slave_0 added [ 241.555212] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.571150] team0: Port device team_slave_1 added [ 241.615462] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.621887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.628557] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.635026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.666511] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.697818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.771893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.780339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.808333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.819161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.838357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.851566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.947889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.955972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.970484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.079877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.097222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.115474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.818606] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.825060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.831802] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.838182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.868729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.875936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.033301] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.039737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.046450] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.052886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.105536] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.524031] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.530502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.537164] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.543601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.563945] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.891279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.910361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.509794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.537991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.045728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.062659] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.082272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.517503] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.582914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.589100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.596815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.636637] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.644195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.666069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.056168] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.080045] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.100527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.120775] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.127051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.153869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.569980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.582080] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.611034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.838924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.054154] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.090754] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.096916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.105187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.346675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.574103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.600523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.615957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.659780] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.899190] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.925287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.943739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.986322] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.347509] 8021q: adding VLAN 0 to HW filter on device team0 00:52:55 executing program 1: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000005c0), 0x4) write$P9_RVERSION(r1, &(0x7f0000000440)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 00:52:55 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='bpq0\x00') ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/8, 0x8, 0x0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000180)) writev(0xffffffffffffffff, &(0x7f0000000380), 0x0) fdatasync(0xffffffffffffffff) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000400)) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000440)}, 0x10) write$P9_ROPEN(r0, &(0x7f00000004c0)={0x18}, 0x18) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000a40), 0x8) 00:52:55 executing program 0: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000005040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "cd607774648fdd0dac844be4f9b1d329d91eae837252e6cb920290c9d73d52b8a9ace7b0a440006535651282191a94f337131e6dc38451052abe84bc051f67439e97fb440a8bff6403f2f3406092adb35f6e886c3f9c6b6bae7cd2d48962ef32bc10395b73756ebb708fd0185c547b8f5eb4e7d4fde4ff055a16549fac4fe38ebc943587f7b235da3d393473bf05c0da85a20e9a40d59698672283d1787d02d8534ad35fdf428f02c28ceee6b04fe57d5e96bca46334707693c0110da3e96f1f5f6bed28d74ac7b75710ac2e3861cbed023c263c63e61b6acd5d7ef55a2c9ad7c05129f1382bd536a58d9ca8ee91c9d6c8bb200c9e6c5540a9438cd0c475e8ce"}}}, 0x128) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000080)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000001b40)}, 0x0) 00:52:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getitimer(0x0, &(0x7f0000000040)) dup2(r0, r2) [ 251.721658] hrtimer: interrupt took 32947 ns 00:52:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 00:52:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4d, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484087135e4a1de046a7d5de6d9cce41242f937570a49fc4d614c14b7a0894ea4f6acdc38e0f820cd671ba7dc85a6ca2e4cbd6f76a2efe42284b1f750659e19bd2affc0858a3b354e02eb3"], 0x0, 0x0, &(0x7f0000002000)}) pause() [ 251.858076] binder: 6902:6904 got transaction to invalid handle [ 251.893536] binder: 6902:6904 transaction failed 29201/-22, size 8202757524048233421--3754697603056894534 line 2855 00:52:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4d, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484087135e4a1de046a7d5de6d9cce41242f937570a49fc4d614c14b7a0894ea4f6acdc38e0f820cd671ba7dc85a6ca2e4cbd6f76a2efe42284b1f750659e19bd2affc0858a3b354e02eb3"], 0x0, 0x0, &(0x7f0000002000)}) pause() [ 251.911729] binder: 6902:6911 got transaction to invalid handle [ 251.918158] binder: 6902:6911 transaction failed 29201/-22, size 8202757524048233421--3754697603056894534 line 2855 [ 251.931774] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.938284] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.999406] binder: 6915:6917 got transaction to invalid handle [ 252.019323] binder: 6915:6917 transaction failed 29201/-22, size 8202757524048233421--3754697603056894534 line 2855 00:52:56 executing program 0: set_mempolicy(0x1, &(0x7f00000000c0), 0x100) madvise(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xcb) 00:52:56 executing program 0: accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@loopback, @loopback}, 0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 252.282767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 252.331743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 252.785384] binder: undelivered TRANSACTION_ERROR: 29201 [ 252.892484] FAT-fs (loop3): Unrecognized mount option "fsuuid=a" or missing value 00:52:57 executing program 3: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000000100), &(0x7f0000000140)={0x77359400}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x5e, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/216}, 0x18) 00:52:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xffa4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 00:52:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x5e, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000040)="0de9e74f7010f92e405688b9ceea03d4c2e3b711ea78b18bbae9bacc9f54490ef7705aabffa9e8fbe57a35d35b474b3f777259c9533e79e70bb9644b924412847c36b5132c507ba6ff727baa15e172ac4ca6fe805b51ec718791d5f7b69df8d2830dd5d364ca163384f03afda21f132bcb34aae2e17b93ef6e3b3e42538f3cb0efb25df20c3873bca4df089202a1d7ec266c6495a4bf1909e65335b43521aeb4ae2e0d9a910d25ab8e974a05b85f0c6009d8bce720b0e2f0fdf3d8f68f2b0c4c", &(0x7f0000000280)="6d41cac9fc1b722360aee112ef1bef1fbd6e5e428f07e9f8f94cfe3df79c33db394ca017fd491f53b151fda9c822584797d08249cccf25ce0bd3471c03ada68cd3c8b87a2be03c23a3893629133cf1872eec7fb245fe3c1f8fa62038599d269fe5951abd7bb5be94c45ef65315a5e347d807", 0xfffffffffffffffd}, 0x20) 00:52:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4d, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484087135e4a1de046a7d5de6d9cce41242f937570a49fc4d614c14b7a0894ea4f6acdc38e0f820cd671ba7dc85a6ca2e4cbd6f76a2efe42284b1f750659e19bd2affc0858a3b354e02eb3"], 0x0, 0x0, &(0x7f0000002000)}) pause() 00:52:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') 00:52:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) [ 253.325535] binder: 7013:7020 got transaction to invalid handle [ 253.340466] binder: 7013:7020 transaction failed 29201/-22, size 8202757524048233421--3754697603056894534 line 2855 00:52:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 00:52:57 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000000), &(0x7f000044cfc0), &(0x7f0000000ff8), &(0x7f0000000ff8)={&(0x7f0000000ff8), 0xffffffffffffff0d}) [ 253.407488] binder: 7030:7031 transaction failed 29189/-22, size 0-0 line 2855 00:52:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {0x0, 0x9}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c7facc90da15d381"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x1, 0x802, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0) 00:52:57 executing program 0: request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0x0) 00:52:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x20000000014143e, 0x0) write$P9_RREAD(r1, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0xcdd) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7}, 0x314) syncfs(r2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) 00:52:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f00000004c0), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000100)) 00:52:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) shutdown(r0, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x105000, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) [ 254.044426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 254.133680] binder: undelivered TRANSACTION_ERROR: 29201 00:52:58 executing program 1: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) 00:52:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)=0x6fc3) 00:52:58 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x100) 00:52:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r1 = gettid() ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 00:52:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4d, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484087135e4a1de046a7d5de6d9cce41242f937570a49fc4d614c14b7a0894ea4f6acdc38e0f820cd671ba7dc85a6ca2e4cbd6f76a2efe42284b1f750659e19bd2affc0858a3b354e02eb3"], 0x0, 0x0, &(0x7f0000002000)}) pause() 00:52:58 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) [ 254.246393] binder: 7073:7076 got transaction to invalid handle [ 254.282020] binder: 7073:7076 transaction failed 29201/-22, size 8202757524048233421--3754697603056894534 line 2855 00:52:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'ip6gretap0\x00', @ifru_ivalue}) 00:52:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000240)="18", 0x1, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000540), 0x2) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000051c0)={&(0x7f0000000200), 0xc, &(0x7f0000005180)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) [ 254.318562] binder: undelivered TRANSACTION_ERROR: 29201 00:52:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x520d0000, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) write$P9_RRENAME(r0, &(0x7f0000000000)={0xfffffffffffffc97}, 0x291) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb}, 0xb) [ 254.396825] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 254.401571] ip6gretap0: mtu less than device minimum 00:52:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x5e, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/216}, 0x18) 00:52:58 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x100) 00:52:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000000)=""/112, 0x70, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000001140)={&(0x7f00000001c0), 0xc, &(0x7f0000001100)={&(0x7f0000000700)=@bridge_getneigh={0x20, 0x1e, 0x101}, 0x20}}, 0x0) 00:52:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xcb) 00:52:59 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop'}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x0, &(0x7f0000000380)="231a2a2800") 00:52:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r1 = gettid() ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 00:52:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) capset(&(0x7f0000000000), &(0x7f0000001fe8)) openat$rtc(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/rtc0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000900)='/dev/input/mouse#\x00', 0xc5c8, 0x0) 00:52:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6a0e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x200010000009, 0xffffffffffffffff, 0x1, r1}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xa, 0x10, r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0xfffffffffffffff8, 0x9, 0x6839e993, 0x1}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x7}, 0x8) 00:52:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x80000000000040, &(0x7f0000000240)="5730ab15f455a8399553555dd26de69835f2d807182d240e0c26bb23953560e244bd3bea1f6f7fc1177de53273740f64f6e3c066fa39a91f3d4bfb62fa308c3951697821ae1367563a030b051e487d1672be6673a8", 0x55) 00:52:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000ac0)=""/15, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) dup2(r0, r1) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, {}, @cond}) 00:52:59 executing program 1: unshare(0x2000400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000040)) 00:53:01 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0xc4c}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x7}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) close(r0) 00:53:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000ac0)=""/15, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) dup2(r0, r1) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 00:53:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0x0, 0x7fffffff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:53:01 executing program 1: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x2000000000008040, 0x0) fcntl$setsig(r0, 0xa, 0x2a) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x8) fcntl$setlease(r1, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000180)='./file0\x00', 0x0) 00:53:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 00:53:01 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x100) 00:53:01 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x1d3) sendmmsg(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)=@pptp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000840)='F', 0x1}], 0x1, &(0x7f00000009c0)}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) write$P9_RAUTH(r1, &(0x7f00000001c0)={0x26ab33b3acd62b8}, 0xffffffa7) 00:53:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x10b000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="b905030000b800000080ba000000000f3066baf80cb8e8631b89ef66bafc0cb8faffffffef48b801000000000000000f23c00f21f835020001000f23f80f00c6b96f0200000f32c744240083000000c744240200000000ff2c2466b8d1008ee866b838018ed8440fc71db2e5f7fdb962080000b86b470000ba000000000f30", 0x7f}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 257.583604] binder: 7164:7169 transaction failed 29189/-22, size 0-0 line 2855 [ 257.592114] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 257.599293] binder: 7164:7173 transaction failed 29189/-22, size 0-0 line 2855 00:53:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) 00:53:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 00:53:02 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000440), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000440)={0xa880000000000000}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 00:53:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300), 0xe}}], 0xc5, 0x0) 00:53:02 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) r3 = dup3(r2, r0, 0x80000) ioctl$KIOCSOUND(r3, 0x4b2f, 0x7f) write(0xffffffffffffffff, &(0x7f00000005c0), 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xe0, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x2}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6e8155bade9d2016, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x24}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa4d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x90}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x58}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2e31d84127732ebe}, 0x1) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r5, 0x8200) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 00:53:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) 00:53:02 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x100) 00:53:02 executing program 2: set_mempolicy(0x1, &(0x7f00000000c0), 0x100) madvise(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0xca) 00:53:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6a0e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x200010000009, 0xffffffffffffffff, 0x1, r1}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x7}, 0x8) 00:53:02 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411b0ce, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x10000000000000ea) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000380)=""/34, 0x22}], 0x4, 0x0) io_setup(0x3ff, &(0x7f0000000100)=0x0) fchown(r1, 0x0, 0x0) capset(&(0x7f0000000140), &(0x7f00000001c0)={0x6, 0x0, 0x9}) io_submit(r3, 0x0, &(0x7f0000000200)) semget$private(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffc) 00:53:02 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000500)) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @rand_addr}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:53:03 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x100000001) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000001c0)) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000100)) 00:53:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000027d86447365a7819400000000000"], 0x2e) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 00:53:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) 00:53:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) read(r0, &(0x7f0000000880)=""/226, 0xe2) 00:53:03 executing program 3: recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/27, 0x1b}], 0x1, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 00:53:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) [ 259.152191] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 00:53:03 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:03 executing program 2: close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x80003) [ 259.274562] syz-executor5 (7245) used greatest stack depth: 8896 bytes left 00:53:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f0000003240)=[{&(0x7f0000002f80)=""/244, 0xf4}], 0x1, 0x0) 00:53:03 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x0, &(0x7f0000000380)="231a2a2800") [ 259.407452] print_req_error: I/O error, dev loop1, sector 0 00:53:03 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411b0ce, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x10000000000000ea) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000380)=""/34, 0x22}], 0x4, 0x0) io_setup(0x3ff, &(0x7f0000000100)=0x0) fchown(r1, 0x0, 0x0) capset(&(0x7f0000000140), &(0x7f00000001c0)={0x6, 0x0, 0x9}) io_submit(r3, 0x0, &(0x7f0000000200)) semget$private(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffc) [ 259.460112] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 259.467093] squashfs: SQUASHFS error: unable to read squashfs_super_block 00:53:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)}) 00:53:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x2, 0x0, &(0x7f0000000480)="f27a"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0xff4a) 00:53:03 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 259.602021] binder: 7320:7321 Acquire 1 refcount change on invalid ref 0 ret -22 00:53:03 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) unshare(0x60020200) [ 259.655402] binder: 7320:7321 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 00:53:04 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0xb) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) [ 259.719220] binder: 7320:7331 Acquire 1 refcount change on invalid ref 0 ret -22 [ 259.736062] binder: 7320:7331 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 00:53:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4800) 00:53:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xfffffffffffffced, 0x0, &(0x7f0000000040)}) 00:53:04 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 259.852865] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 00:53:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x40000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 259.974212] binder: 7352:7354 Acquire 1 refcount change on invalid ref 0 ret -22 [ 259.975590] IPVS: ftp: loaded support on port[0] = 21 [ 260.026037] binder: 7352:7354 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 00:53:04 executing program 4: write(0xffffffffffffffff, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:04 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411b0ce, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x10000000000000ea) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000380)=""/34, 0x22}], 0x4, 0x0) io_setup(0x3ff, &(0x7f0000000100)=0x0) fchown(r1, 0x0, 0x0) capset(&(0x7f0000000140), &(0x7f00000001c0)={0x6, 0x0, 0x9}) io_submit(r3, 0x0, &(0x7f0000000200)) semget$private(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffc) 00:53:04 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000240)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) fremovexattr(r2, &(0x7f0000000100)=@random={'user.', 'eth1em1\x00'}) 00:53:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:53:04 executing program 4: r0 = socket(0x0, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:04 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:04 executing program 4: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:04 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:04 executing program 4: socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 00:53:05 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080), 0x0) 00:53:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) [ 260.962796] device bridge_slave_0 left promiscuous mode [ 261.012281] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.077493] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 00:53:05 executing program 5: 00:53:05 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080), 0x0) 00:53:05 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c7facc90da15d381"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x1, 0x802, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0) 00:53:05 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x80ab, 0x5da5) r0 = open(&(0x7f0000000280)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000002540)=[{&(0x7f0000000800)="edf5262227ba3f0f2aa4dee75f297d9e666c0c772c52085dca825b427fada19eaf6ae9850e8674022e1654a6d2bb8af117434330a0dd17df2e2dca96cebec867f43169ef0e110454767dc33079d2971cce123198ebb6ebc8cb98ff4fd33593997e4d24c72b772e8a522d88b280d42139344fb624919d2b8ce032e945742c4509b1aee978db261f113fe57c231c071bada7190b73e6786ea6a2b09984a4dc1863c16d083da28ac380a7ac92a150e9e4cd324dd2e13ed711df88a56a2f9853f9da413e6f41d9fcac9a0a922a893fa3f0a7ccda2019484264414fca96285a322d5f90650df66d7b59eaffa432569c7f71f9960a3eb6acdee1ab25a3e77dabdc5b7eaa9cfa8f6f00d721363f836230d004bedc72dc576803162c0341c34a0d1ad23e12ac3f91c04b634aeaf43e40015d47126b5192ce9f7ff96737f07a6290f530eea3f03a2ef09612d94c1a7523cc0a397ab56a9464668930292e92ce47c7521dbeaa891c8160a5df173cfc9eefa70acd84dbab423e66718f3019c9a64069a806c62323d1dcc4673c73d02c9d7675579c23a11a6467e6bb00a5336591a0f4745f6a4b526ba3b0008adcfa6a8b2fbf654f1d75bb2feedc6ff39d42043f1268c077609fbcd8a12799b45afa594f98aa335b4cc1044ca34f9b37f7d146cca9c51d1ec2a2b72877e9d40b2e2805fe35a8e46f163f19badb6aba5373c063f0e56e1e5b1c014f013396e1729a28775c93dcce2ce3ecda83b767d4bbcf3f76a861783ec9559c90a6a51647d169248836d48ee0074c9186ff63338d858256a59f4c1057d02e2801ab185b3965ce512543cb0f1464e446f66550a2e62f63ca6fed5ed118b52770db8cbb1fa6995bcd0d792e7145f0842bb70148d46902aa9a983e1d9c49a97deec53051c4da73be466e6f79fbf39a1e0a675372b9db466ba09bc36c353ebf90550b0a7279eb0f7622f6950b738b902e7c7cea565a9bc85574f9b95f6553fece6a9a835b650af945cacbb7c0e689f9acaf56e0693f5225958de49ec3c4f03d0dfbab7c28ca6ead76dd4e6ae9b0e0cbc6dbad2b0eef577baddfc189a312c047318347565c652e3afb20520540ce52ec8d6ad431400ba7c0fa3f93a7f5e6d5a96e225b1b5cb4146ec5616900e80468e6962fbca9eee77a882034bbb19006bc3f97b19e7d6dde8c78852689fb3bcc8151663967b758f63de48a7139a2efa76a920f804085d550790865a24ed21e2ed5d691994c33f5bf36d29c9c91578749438303306a49c19437b4ec9ed9d8407ae45b14ce8193cfd0bd42aaafc1d0006e2ce23d0f44954408ccb4938515bf8f776eb975fbe96f71fcaa143e09f13d5c5d90493bb898fe4bfb39b3055212e9616933d7da79add8e9ccf53b130f700c2068ed501dcf8132a5d17cc5f6c12b5b141b6014df28601263e3ca14e0db6eef5e5d104b16184650dc0e793375176af1490862debdedb33533cc58cb7dff5f656d0045b28b4a427559dabf02bb548e2c512942226a726eff6bf8ec0c400c2e12c506232a884e583492c2f3a9b02632f1597576d37fb16b7ae827310039e9176e6959279d52b63a9a4e3969d80d02cecc7fbed34e7fea03f8eda90c4847db4baf4a5cf82b73213ff24a3c909ff725d265e668519015892fce7c4f19ba0a923d25e8974a1384167a9aef08358c93cff38ce014d31028337494372b372f7f03737490a72c95295088a58e179505e24b831fafa24d1474f3b9e1d2b4fee34e9d912f86aa13b0c69faafe9dc43fb482827ee90814030c5a8423f3eb8118e7669284979053dbf16aea32d38b4ff34137d6717962eaee3fc792029daa78", 0x515}], 0x1, 0x44) 00:53:05 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:05 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080), 0x0) 00:53:05 executing program 5: 00:53:05 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:05 executing program 0: 00:53:05 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6", 0x12) 00:53:05 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)="63707526a4b10d0ac0f92a60006c42947864c820f4b3ca0c907c1f66f0d29b61026a2828b182b270bbf3ddba72aadc4394cded87351f24b12af200b5787f562d57eb9cf5e52064996d5d4f1399754abdef6583a4177e9e5cac1f7d2c14282a93") 00:53:05 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") recvmmsg(0xffffffffffffffff, &(0x7f0000005780), 0x0, 0x0, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/67) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r1, 0x0) 00:53:05 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) 00:53:05 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6", 0x12) 00:53:06 executing program 3: 00:53:06 executing program 5: 00:53:06 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6", 0x12) 00:53:06 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) close(r0) 00:53:06 executing program 0: 00:53:06 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:07 executing program 5: 00:53:07 executing program 0: 00:53:07 executing program 3: 00:53:07 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ff", 0x1b) 00:53:07 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) close(r0) 00:53:07 executing program 0: 00:53:07 executing program 5: 00:53:07 executing program 3: 00:53:07 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ff", 0x1b) 00:53:07 executing program 0: 00:53:07 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) close(r0) 00:53:07 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:07 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ff", 0x1b) 00:53:07 executing program 3: 00:53:07 executing program 5: 00:53:07 executing program 0: 00:53:07 executing program 3: 00:53:07 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb08001900", 0x20) 00:53:07 executing program 5: 00:53:07 executing program 0: 00:53:07 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:07 executing program 0: 00:53:07 executing program 3: 00:53:07 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:07 executing program 5: 00:53:07 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb08001900", 0x20) 00:53:07 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:07 executing program 3: 00:53:07 executing program 0: 00:53:07 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:07 executing program 5: 00:53:07 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb08001900", 0x20) 00:53:08 executing program 0: 00:53:08 executing program 3: 00:53:08 executing program 5: 00:53:08 executing program 2: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0xc) close(0xffffffffffffffff) 00:53:08 executing program 3: 00:53:08 executing program 0: 00:53:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7", 0x22) 00:53:08 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:08 executing program 5: 00:53:08 executing program 0: 00:53:08 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:08 executing program 3: 00:53:08 executing program 5: 00:53:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7", 0x22) 00:53:08 executing program 0: 00:53:08 executing program 5: 00:53:08 executing program 3: 00:53:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7", 0x22) 00:53:08 executing program 0: 00:53:08 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:08 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d700", 0x23) 00:53:08 executing program 5: 00:53:08 executing program 0: 00:53:08 executing program 3: 00:53:08 executing program 0: 00:53:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d700", 0x23) 00:53:08 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:08 executing program 5: 00:53:08 executing program 3: 00:53:08 executing program 0: 00:53:09 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:09 executing program 5: 00:53:09 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d700", 0x23) 00:53:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:09 executing program 3: 00:53:09 executing program 0: 00:53:09 executing program 3: 00:53:09 executing program 5: 00:53:09 executing program 4: 00:53:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:09 executing program 0: 00:53:09 executing program 5: 00:53:09 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:09 executing program 3: 00:53:09 executing program 4: 00:53:09 executing program 0: 00:53:09 executing program 5: 00:53:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:09 executing program 5: 00:53:09 executing program 3: 00:53:09 executing program 0: 00:53:09 executing program 4: 00:53:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:09 executing program 5: 00:53:09 executing program 0: 00:53:09 executing program 4: 00:53:09 executing program 3: 00:53:09 executing program 5: 00:53:09 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:09 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:10 executing program 5: 00:53:10 executing program 0: 00:53:10 executing program 4: 00:53:10 executing program 3: 00:53:10 executing program 5: 00:53:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:10 executing program 3: 00:53:10 executing program 0: 00:53:10 executing program 5: 00:53:10 executing program 4: 00:53:10 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:10 executing program 3: 00:53:10 executing program 5: 00:53:10 executing program 0: 00:53:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:10 executing program 4: 00:53:10 executing program 3: 00:53:10 executing program 5: 00:53:10 executing program 0: 00:53:10 executing program 4: 00:53:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:10 executing program 0: 00:53:10 executing program 4: 00:53:10 executing program 3: 00:53:10 executing program 5: 00:53:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) close(r0) 00:53:10 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:10 executing program 0: 00:53:10 executing program 4: 00:53:10 executing program 5: 00:53:10 executing program 3: 00:53:10 executing program 0: 00:53:10 executing program 5: 00:53:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) write$9p(r0, &(0x7f00000002c0)="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", 0x480) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xfffffffffffffe8f, 0x0, &(0x7f0000893ff0), 0x10) write$binfmt_elf64(r0, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x35}]}, 0x78) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='lo\x00', 0x10) 00:53:11 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) close(r0) 00:53:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000200)=0x1) 00:53:11 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) 00:53:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000006) ioctl(r0, 0x8910, &(0x7f000000a880)) 00:53:11 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0xfffffffffffffffd) 00:53:11 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) close(r0) 00:53:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7fffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr/keycreate\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:53:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={"6c6f000086003f8b000000001a00", {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000280)={'lo\x00'}) 00:53:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000027c0)={&(0x7f0000002580), 0xc, &(0x7f0000002780)={&(0x7f0000002600)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffff001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x182c9b7c}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 00:53:11 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(0xffffffffffffffff) 00:53:11 executing program 3: capset(&(0x7f0000000180)={0x19980330}, &(0x7f00009b3000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) 00:53:11 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000429bd7000fbdbdf250d000000080004000700000008000500030000000800e33354317c22670500ef0200000c00"], 0x1}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000280)={0xffffffff}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) getsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000000)=""/51, &(0x7f0000000140)=0x33) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000340)=[{}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x6, &(0x7f0000000800)=""/92, 0x5c, 0x2}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000180)=ANY=[]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:53:11 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)={0x81}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0x20280) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x10000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4, 0xb95}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x1b, 0x0, 0x400, 0x6, 0x0, 0xdb81, 0x3}}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'veth1_to_team\x00', &(0x7f0000000480)=@ethtool_test={0x1a, 0x0, 0x8, 0x2, [0x20, 0x100000000]}}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x6, r1, 0x1}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000600)=ANY=[]}], 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYBLOB="cb000000a443d7d03c52547d31df77a2f4dd58930344ffb8376847f1b40a7bdfc5b3fab020c7b6388c4baba8774294758887c7a27c03789b71e607ff59e9e783f81e7dacac4631abb9b60692304d3da0eddfab582232b6b40336c9c4ce837b0331f67a5ca50c64ba9da84a9025334c4797770003d7cac5e003597116af75deca5d8a346447a1eaac7121cbfe1df68e6a3ec673e471a867ad4ffaca6f53850bcb762592ed6806ddd6dfc7e57344d321f3f722a3a0829623a8c672fee7c6a9d64756e055613a1ffb842527f58a"], &(0x7f0000000380)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0), &(0x7f0000000440)=0xc) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x700000000000000) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) getsockname(r0, &(0x7f00000005c0)=@can={0x1d, 0x0}, &(0x7f0000000640)=0x80) recvfrom(r3, &(0x7f0000000500)=""/141, 0x8d, 0x10000, &(0x7f0000000680)=@hci={0x1f, r4, 0x3}, 0x80) [ 267.338482] mmap: syz-executor5 (7851) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 00:53:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x5e, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/216}, 0x18) 00:53:11 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:11 executing program 3: 00:53:12 executing program 3: 00:53:12 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:12 executing program 3: 00:53:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={"6c6f000086003f8b000000001a00", {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000280)={'lo\x00'}) 00:53:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)) 00:53:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000006c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000700)) tgkill(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x79ffffffffffff) 00:53:12 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)={0x81}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0x20280) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x10000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4, 0xb95}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xffffffffffffffda, 0x3, {0x7, 0x1b, 0x0, 0x400, 0x6, 0x0, 0xdb81, 0x3}}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'veth1_to_team\x00', &(0x7f0000000480)=@ethtool_test={0x1a, 0x0, 0x8, 0x2, [0x20, 0x100000000]}}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x6, r1, 0x1}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000600)=ANY=[]}], 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYBLOB="cb000000a443d7d03c52547d31df77a2f4dd58930344ffb8376847f1b40a7bdfc5b3fab020c7b6388c4baba8774294758887c7a27c03789b71e607ff59e9e783f81e7dacac4631abb9b60692304d3da0eddfab582232b6b40336c9c4ce837b0331f67a5ca50c64ba9da84a9025334c4797770003d7cac5e003597116af75deca5d8a346447a1eaac7121cbfe1df68e6a3ec673e471a867ad4ffaca6f53850bcb762592ed6806ddd6dfc7e57344d321f3f722a3a0829623a8c672fee7c6a9d64756e055613a1ffb842527f58a"], &(0x7f0000000380)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0), &(0x7f0000000440)=0xc) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x700000000000000) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) getsockname(r0, &(0x7f00000005c0)=@can={0x1d, 0x0}, &(0x7f0000000640)=0x80) recvfrom(r3, &(0x7f0000000500)=""/141, 0x8d, 0x10000, &(0x7f0000000680)=@hci={0x1f, r4, 0x3}, 0x80) 00:53:13 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000429bd7000fbdbdf250d000000080004000700000008000500030000000800e33354317c22670500ef0200000c00"], 0x1}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000280)={0xffffffff}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) getsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000000)=""/51, &(0x7f0000000140)=0x33) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000340)=[{}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x6, &(0x7f0000000800)=""/92, 0x5c, 0x2}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000180)=ANY=[]) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:53:13 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 00:53:13 executing program 3: 00:53:13 executing program 4: 00:53:13 executing program 3: 00:53:13 executing program 3: 00:53:13 executing program 4: 00:53:13 executing program 0: 00:53:13 executing program 3: 00:53:13 executing program 4: 00:53:13 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:14 executing program 5: 00:53:14 executing program 2: 00:53:14 executing program 4: 00:53:14 executing program 3: 00:53:14 executing program 0: 00:53:14 executing program 3: 00:53:14 executing program 2: 00:53:14 executing program 0: 00:53:14 executing program 4: 00:53:14 executing program 5: 00:53:14 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:14 executing program 3: 00:53:14 executing program 2: 00:53:14 executing program 0: 00:53:14 executing program 4: 00:53:14 executing program 3: 00:53:14 executing program 5: 00:53:14 executing program 2: 00:53:14 executing program 3: 00:53:14 executing program 0: 00:53:14 executing program 4: 00:53:14 executing program 2: 00:53:14 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/68) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:14 executing program 5: 00:53:14 executing program 2: 00:53:14 executing program 0: 00:53:14 executing program 4: 00:53:14 executing program 3: 00:53:14 executing program 0: 00:53:14 executing program 2: 00:53:14 executing program 5: 00:53:14 executing program 3: 00:53:14 executing program 4: 00:53:15 executing program 2: 00:53:15 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:15 executing program 0: 00:53:15 executing program 4: 00:53:15 executing program 5: 00:53:15 executing program 3: 00:53:15 executing program 5: 00:53:15 executing program 2: 00:53:15 executing program 0: 00:53:15 executing program 4: 00:53:15 executing program 3: 00:53:15 executing program 5: 00:53:15 executing program 0: 00:53:15 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:15 executing program 2: 00:53:15 executing program 4: 00:53:15 executing program 3: 00:53:15 executing program 5: 00:53:15 executing program 0: 00:53:15 executing program 2: 00:53:15 executing program 4: 00:53:15 executing program 3: 00:53:15 executing program 5: 00:53:15 executing program 0: 00:53:15 executing program 3: 00:53:15 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000300)=""/68) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) 00:53:15 executing program 5: 00:53:15 executing program 4: 00:53:15 executing program 2: 00:53:15 executing program 0: 00:53:15 executing program 3: 00:53:15 executing program 0: 00:53:15 executing program 5: 00:53:15 executing program 2: 00:53:15 executing program 4: 00:53:16 executing program 4: 00:53:16 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)) 00:53:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000100)=""/11, 0x3bd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = syz_open_pts(r0, 0x0) close(r2) dup2(r3, r4) 00:53:16 executing program 5: io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x100) 00:53:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x28, &(0x7f0000000240)}, 0x10) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300), 0xe}}], 0xc5, 0x0) 00:53:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x74000000) 00:53:16 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/68) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:16 executing program 5: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:16 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:16 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:16 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:16 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:16 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 5: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 1: io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 5: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 2: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:17 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:17 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 5: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:17 executing program 2: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:17 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/68) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 5: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 2: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:17 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:17 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:17 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:17 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) 00:53:18 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:18 executing program 5 (fault-call:1 fault-nth:0): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 273.801008] FAULT_INJECTION: forcing a failure. [ 273.801008] name failslab, interval 1, probability 0, space 0, times 1 [ 273.814115] FAULT_INJECTION: forcing a failure. [ 273.814115] name failslab, interval 1, probability 0, space 0, times 1 00:53:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000400)=""/19) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r4, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r6 = dup2(r1, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f00000006c0)) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x67, 0x7f, "fc3b60ed64350a35f472dda32b5070c4e41b202b9cd214ff38ad2ebaf5439debbd5ed73050882b8e3dd8cdb7c6bdeec403ca74b6563901c6f7ceb71b519de0bd353f9461f20c2a00f882b993c93f5c0dd26784a3d9568b56018d634ea93a5d"}, &(0x7f0000000540), 0x1400) accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) r9 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r9, 0x40140921, &(0x7f0000000640)={0x0, 0xf56, 0x20, &(0x7f0000000580)="fca1cd09ed827cd9b5d42134cac4be5066cee7b8c3c9fbd783aca64702a3ea737cd2e7f9d8ca5ed160b754a386bb9a72b0a597394044c0829b982ca02781102267659713be3540bb"}) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) 00:53:18 executing program 4: r0 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000000)='X', 0xffffffffffffff1c, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x7, 0x24000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000200)=0xd, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f734704cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c21700", 0xc0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x810, r2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 00:53:18 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) close(r0) [ 273.845883] CPU: 1 PID: 8230 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #290 [ 273.853190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.853199] Call Trace: [ 273.853241] dump_stack+0x1c4/0x2b4 [ 273.853267] ? dump_stack_print_info.cold.2+0x52/0x52 [ 273.853299] should_fail.cold.4+0xa/0x17 [ 273.853318] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 273.853337] ? graph_lock+0x170/0x170 [ 273.853355] ? mark_held_locks+0xc7/0x130 [ 273.853381] ? lock_acquire+0x1ed/0x520 [ 273.895354] ? hci_unregister_dev+0x7cc/0x990 [ 273.899875] ? lock_release+0x970/0x970 [ 273.903866] ? arch_local_save_flags+0x40/0x40 [ 273.908458] ? hci_dev_do_close+0xee7/0x1180 [ 273.912883] ? lock_downgrade+0x900/0x900 [ 273.917055] ? graph_lock+0x170/0x170 [ 273.920874] ? __mutex_lock+0x85e/0x1700 [ 273.924952] ? hci_unregister_dev+0x7cc/0x990 [ 273.924969] ? cancel_delayed_work+0x20a/0x3e0 [ 273.925005] __should_failslab+0x124/0x180 [ 273.925027] should_failslab+0x9/0x14 [ 273.942127] kmem_cache_alloc_node+0x56/0x730 [ 273.946654] __alloc_skb+0x119/0x770 [ 273.950393] ? skb_scrub_packet+0x490/0x490 [ 273.954742] ? kasan_check_write+0x14/0x20 [ 273.959004] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 273.963950] ? wait_for_completion+0x8a0/0x8a0 [ 273.963980] hci_sock_dev_event+0x1ee/0x740 [ 273.964003] ? mgmt_index_removed+0x16d/0x410 [ 273.964022] ? hci_send_monitor_ctrl_event+0x520/0x520 [ 273.964045] ? do_raw_write_trylock+0x1c0/0x1c0 [ 273.982719] hci_unregister_dev+0x335/0x990 [ 273.982743] ? hci_bdaddr_list_clear+0x2f0/0x2f0 [ 273.982764] ? ima_file_check+0x130/0x130 [ 273.982794] ? vhci_close_dev+0x50/0x50 [ 273.982815] vhci_release+0x76/0xf0 [ 273.996543] __fput+0x385/0xa30 [ 273.996565] ? get_max_files+0x20/0x20 [ 273.996586] ? trace_hardirqs_on+0xbd/0x310 [ 274.019784] ? kasan_check_read+0x11/0x20 [ 274.023941] ? task_work_run+0x1af/0x2a0 [ 274.023962] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 274.023981] ? kasan_check_write+0x14/0x20 [ 274.024008] ? do_raw_spin_lock+0xc1/0x200 [ 274.024028] ____fput+0x15/0x20 [ 274.024047] task_work_run+0x1e8/0x2a0 [ 274.037783] ? task_work_cancel+0x240/0x240 [ 274.037807] ? copy_fd_bitmaps+0x210/0x210 [ 274.037826] ? do_syscall_64+0x9a/0x820 [ 274.037847] exit_to_usermode_loop+0x318/0x380 [ 274.037868] ? syscall_slow_exit_work+0x520/0x520 [ 274.053579] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 274.053603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.053625] do_syscall_64+0x6be/0x820 [ 274.053644] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 274.053664] ? syscall_return_slowpath+0x5e0/0x5e0 00:53:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x1a, &(0x7f0000c86000), &(0x7f0000000080)) [ 274.066445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.066467] ? trace_hardirqs_on_caller+0x310/0x310 [ 274.066486] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 274.066504] ? prepare_exit_to_usermode+0x291/0x3b0 [ 274.066527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.066550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.126458] RIP: 0033:0x457569 [ 274.129660] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.148567] RSP: 002b:00007fa70c386c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 274.148594] RAX: 0000000000000000 RBX: 00007fa70c386c90 RCX: 0000000000457569 [ 274.148603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 274.148618] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 274.170860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa70c3876d4 [ 274.170872] R13: 00000000004ef912 R14: 00000000004cc460 R15: 0000000000000004 [ 274.204984] CPU: 0 PID: 8231 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #290 [ 274.212274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.212281] Call Trace: [ 274.212308] dump_stack+0x1c4/0x2b4 [ 274.212330] ? dump_stack_print_info.cold.2+0x52/0x52 [ 274.212361] should_fail.cold.4+0xa/0x17 [ 274.212383] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 274.212402] ? rcu_bh_qs+0xc0/0xc0 [ 274.212418] ? __netlink_insert+0xd2c/0x13b0 [ 274.212435] ? __netlink_insert+0xd2c/0x13b0 [ 274.212453] ? graph_lock+0x170/0x170 [ 274.212476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 274.212500] ? graph_lock+0x170/0x170 [ 274.212520] ? graph_lock+0x170/0x170 [ 274.212541] ? find_held_lock+0x36/0x1c0 [ 274.224629] ? ___might_sleep+0x1ed/0x300 [ 274.233415] ? __local_bh_enable_ip+0x160/0x260 [ 274.233434] ? arch_local_save_flags+0x40/0x40 [ 274.233453] ? trace_hardirqs_on+0xbd/0x310 [ 274.233470] ? _raw_spin_unlock_bh+0x30/0x40 [ 274.233502] __should_failslab+0x124/0x180 [ 274.272124] should_failslab+0x9/0x14 [ 274.280313] kmem_cache_alloc_node+0x26e/0x730 [ 274.280333] ? __local_bh_enable_ip+0x160/0x260 [ 274.280352] ? _raw_spin_unlock_bh+0x30/0x40 [ 274.280373] __alloc_skb+0x119/0x770 [ 274.280394] ? skb_scrub_packet+0x490/0x490 [ 274.280416] ? netlink_insert+0x15a/0x3f0 [ 274.280436] ? __netlink_insert+0x13b0/0x13b0 [ 274.289688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.289706] ? netlink_autobind.isra.34+0x232/0x310 [ 274.289730] netlink_sendmsg+0xb29/0xfc0 [ 274.289756] ? netlink_unicast+0x760/0x760 [ 274.306481] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 274.306509] ? apparmor_socket_sendmsg+0x29/0x30 [ 274.320142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.328170] ? security_socket_sendmsg+0x94/0xc0 [ 274.342333] ? netlink_unicast+0x760/0x760 [ 274.342355] sock_sendmsg+0xd5/0x120 [ 274.342374] sock_write_iter+0x35e/0x5c0 [ 274.342392] ? sock_sendmsg+0x120/0x120 [ 274.342426] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 274.351506] ? iov_iter_init+0xc2/0x1e0 [ 274.351530] __vfs_write+0x6b8/0x9f0 [ 274.351553] ? kernel_read+0x120/0x120 [ 274.351573] ? apparmor_path_rmdir+0x30/0x30 [ 274.383689] ? apparmor_file_permission+0x24/0x30 [ 274.383714] ? rw_verify_area+0x118/0x360 [ 274.400307] vfs_write+0x1fc/0x560 [ 274.400332] ksys_write+0x101/0x260 [ 274.400358] ? __ia32_sys_read+0xb0/0xb0 [ 274.400380] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 274.400405] __x64_sys_write+0x73/0xb0 [ 274.400427] do_syscall_64+0x1b9/0x820 [ 274.416390] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 274.436588] ? syscall_return_slowpath+0x5e0/0x5e0 [ 274.436605] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.436627] ? trace_hardirqs_on_caller+0x310/0x310 [ 274.464981] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 274.465001] ? prepare_exit_to_usermode+0x291/0x3b0 [ 274.465024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.465052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.465066] RIP: 0033:0x457569 00:53:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100e000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x200000000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00']) [ 274.465085] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.465093] RSP: 002b:00007f6626d57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.520082] RAX: ffffffffffffffda RBX: 00007f6626d57c90 RCX: 0000000000457569 [ 274.527365] RDX: 0000000000000024 RSI: 0000000020000080 RDI: 0000000000000003 [ 274.534648] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 274.541928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6626d586d4 [ 274.545848] md: could not open unknown-block(3926,32). 00:53:18 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 274.549207] R13: 00000000004c2883 R14: 00000000004d8568 R15: 0000000000000004 00:53:18 executing program 2 (fault-call:4 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:18 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 274.617785] md: md_import_device returned -6 00:53:18 executing program 5 (fault-call:1 fault-nth:1): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0xffffffffffffffff, 0x80000000031, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r0, 0x127c, &(0x7f0000000000)) 00:53:19 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:19 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0x4, 0x4, 0x7}, 0x2c) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[0x7ff, 0x400, 0xffff]}) ioctl$void(r0, 0x5450) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000000)=0x54) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x9) [ 274.885036] md: could not open unknown-block(3926,32). [ 274.927883] md: md_import_device returned -6 00:53:19 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:19 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3b, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x1, 0x4}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="c3fe"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) close(r1) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:53:19 executing program 3: r0 = inotify_init() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000940)=ANY=[], &(0x7f0000000480)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000240)="22e3f4a9f5f8e7459f647c1dd0b4778747dea4fca88c36afadacceb2c8f1ede80e64b22d", 0x24}, {&(0x7f0000000680)="bb8b3441e8281d7eb68ca93756434703a9988ff73857b93898a85ad67bbfcff674758a95d89b76ad72a6f6c779f6ddb1f8a5686081aa84771210b789bdf0433374e3ec23a5b669113b8eaed0fd92ddc895675784230a1de5f1c790502f07d6a588e01009d75f5000641ffcea3c6382ee494bf0563ee75560ff5f814310f63420dd66cdb8f0dec1e2b9408c89dacffec476f5885c2b0c03f62e97c16bbd5ff96baeec98", 0xa3}], 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f00000004c0)='./file0\x00', 0x40200, 0x11) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000003300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000032c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000003340)={0x16, 0x98, 0xfa00, {&(0x7f0000003100), 0x0, r7, 0x1c, 0x1, @in={0x2, 0x4e24, @rand_addr=0x6eb0}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fcntl$addseals(r2, 0x409, 0xe) r11 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r12 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r12, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'irlan0\x00'}) r13 = socket(0x2, 0x2, 0x8) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) r14 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000300)="7dd76e437497d4e876da61e0d7b937868f1217440083b8595acf6b9de7241dd73814", 0x22, 0xfffffffffffffffb) sendmmsg$unix(r6, &(0x7f00000031c0)=[{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000017c0)="778bd98bd973015126f327ad19c5a01df4e61392395226d27e6d20288a519a2f98ffac858fa3718e8dd15773d9aa7c559a6afd766d3645cf5d157b219f31f92eb7223c969f05f1d7edb7d9b0418b1c153802dafd57741c5251fd1a7e1be16e3dbaa28d80a8", 0x65}], 0x1, &(0x7f0000001840)=[@cred={0x20, 0x1, 0x2, r8, r3, r4}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x20, 0x1, 0x1, [r11, r1, r12, r12]}], 0x60}, {&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002a80)="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", 0xfb}], 0x1, &(0x7f0000002bc0)=[@cred={0x20, 0x1, 0x2, r8, r3, r10}, @rights={0x18, 0x1, 0x1, [r0, r11]}], 0x38, 0x810}, {&(0x7f0000002c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002e80)="1a51213fff6bfa03b6b8ba8f8e67daae30ea990e0d80fac6752f1164f97118d9d6b4bb27ca2453abd5f7e226c9c5a23ad3f3d8814554d89db99c315dae56a89291737550ff5e9821c37449b3ee0d60f625d3ed04f6012eab4e36f34b71d860d11d3627c36b12b1caf7c8dab8d99f9143dede44acb757d905977ff77f48ae95b1ef8308ed7dd03214771edc1abcf5a3b2fc36c8599f6e13e8bb0a3822", 0x9c}], 0x1, &(0x7f0000002f80)=[@rights={0x20, 0x1, 0x1, [r1, r5, r13]}, @rights={0x18, 0x1, 0x1, [r6]}, @rights={0x28, 0x1, 0x1, [r0, r1, r6, r0, r2, r5]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x80, 0x10}, {&(0x7f0000003080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003100), 0x0, &(0x7f0000003140)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r12]}, @cred={0x20, 0x1, 0x2, r8, r9, r4}], 0x58, 0x8001}], 0x4, 0x0) r15 = memfd_create(&(0x7f0000000400)='eth1\x00', 0x0) keyctl$get_security(0x11, r14, &(0x7f00000003c0)=""/5, 0x5) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000540)=0x10, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) sendfile(r11, r11, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r11, 0x4c01) ioctl$LOOP_SET_FD(r15, 0x4c00, r12) 00:53:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x10000000100132, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000002300), &(0x7f0000001280), &(0x7f00000001c0)={0x77359400}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x4d0d6200, 0x800}, 0x18) recvmsg(r0, &(0x7f0000001240)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/89, 0x59}], 0x4, 0x0, 0x0, 0xf872}, 0x2100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000003340)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xffffffffffffff5b, 0x1e}, &(0x7f00000022c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000003400)={r2, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) 00:53:19 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4040, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xbe, 0x200000) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) linkat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x400) dup3(r0, r1, 0x0) 00:53:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="c00000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x10000000100132, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000002300), &(0x7f0000001280), &(0x7f00000001c0)={0x77359400}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x4d0d6200, 0x800}, 0x18) recvmsg(r0, &(0x7f0000001240)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/89, 0x59}], 0x4, 0x0, 0x0, 0xf872}, 0x2100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000003340)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xffffffffffffff5b, 0x1e}, &(0x7f00000022c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000003400)={r2, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) 00:53:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="effdffff1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:19 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x220440, 0x0) syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x8, 0x80) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r4 = dup3(r0, r0, 0x80000) r5 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0xffffffffffff8000, 0x101000) fsync(r3) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000140)={0xa88, 0x1ff, 0x5, 0x1000}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0xfffff7ffffffff14, 0x4, r4}) recvfrom(r0, &(0x7f0000000300)=""/91, 0x5b, 0x2000, &(0x7f0000000180)=@ipx={0x4, 0x7, 0x3, "4057f01a1aae", 0x7}, 0x80) r6 = socket(0x2, 0x803, 0x1) connect$netlink(r6, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc) connect(r0, &(0x7f0000000200)=@generic={0x11, "2147aa70ae962c108adcf2dd4bc010f7075fb0f0ddec334eccecd3842ac08a1be2919eb02c9f9763facf622284a87470ec9349e871c7abfd6a3f77a1559257e8bb3d4a3c6ccb5cba4cf16de4b4060fe1cd2762f70127603430023a5b802d0e82adf926823e846f4be919fc4ac74dafd75f25d1f18eeda00020b8af8f71ae"}, 0x80) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) [ 275.456262] print_req_error: I/O error, dev loop0, sector 0 [ 275.462354] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 275.478944] print_req_error: I/O error, dev loop0, sector 8 [ 275.484828] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 275.493542] print_req_error: I/O error, dev loop0, sector 16 [ 275.499367] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 275.507572] print_req_error: I/O error, dev loop0, sector 24 [ 275.513532] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 275.521305] print_req_error: I/O error, dev loop0, sector 32 [ 275.527137] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 275.530569] print_req_error: I/O error, dev loop0, sector 40 [ 275.534887] print_req_error: I/O error, dev loop0, sector 48 [ 275.540782] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 275.546558] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 275.554283] print_req_error: I/O error, dev loop0, sector 56 [ 275.561986] print_req_error: I/O error, dev loop0, sector 64 [ 275.567727] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 275.573642] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 275.581272] print_req_error: I/O error, dev loop0, sector 72 [ 275.588896] Buffer I/O error on dev loop0, logical block 10, lost async page write 00:53:19 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="780e00001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:19 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1ed, 0x800) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x80000000, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0xa, 0x0, 0x80, 0x401, 0x0, r0}, 0x2c) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 00:53:19 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x8, [@dev={[], 0x1c}, @random="17610d810462", @local, @random="ce2b2298dc91", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @dev={[], 0x20}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) 00:53:20 executing program 3: r0 = inotify_init() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000940)=ANY=[], &(0x7f0000000480)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000240)="22e3f4a9f5f8e7459f647c1dd0b4778747dea4fca88c36afadacceb2c8f1ede80e64b22d", 0x24}, {&(0x7f0000000680)="bb8b3441e8281d7eb68ca93756434703a9988ff73857b93898a85ad67bbfcff674758a95d89b76ad72a6f6c779f6ddb1f8a5686081aa84771210b789bdf0433374e3ec23a5b669113b8eaed0fd92ddc895675784230a1de5f1c790502f07d6a588e01009d75f5000641ffcea3c6382ee494bf0563ee75560ff5f814310f63420dd66cdb8f0dec1e2b9408c89dacffec476f5885c2b0c03f62e97c16bbd5ff96baeec98", 0xa3}], 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f00000004c0)='./file0\x00', 0x40200, 0x11) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000003300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000032c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000003340)={0x16, 0x98, 0xfa00, {&(0x7f0000003100), 0x0, r7, 0x1c, 0x1, @in={0x2, 0x4e24, @rand_addr=0x6eb0}}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fcntl$addseals(r2, 0x409, 0xe) r11 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r12 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r12, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'irlan0\x00'}) r13 = socket(0x2, 0x2, 0x8) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) r14 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000300)="7dd76e437497d4e876da61e0d7b937868f1217440083b8595acf6b9de7241dd73814", 0x22, 0xfffffffffffffffb) sendmmsg$unix(r6, &(0x7f00000031c0)=[{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000017c0)="778bd98bd973015126f327ad19c5a01df4e61392395226d27e6d20288a519a2f98ffac858fa3718e8dd15773d9aa7c559a6afd766d3645cf5d157b219f31f92eb7223c969f05f1d7edb7d9b0418b1c153802dafd57741c5251fd1a7e1be16e3dbaa28d80a8", 0x65}], 0x1, &(0x7f0000001840)=[@cred={0x20, 0x1, 0x2, r8, r3, r4}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x20, 0x1, 0x1, [r11, r1, r12, r12]}], 0x60}, {&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002a80)="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", 0xfb}], 0x1, &(0x7f0000002bc0)=[@cred={0x20, 0x1, 0x2, r8, r3, r10}, @rights={0x18, 0x1, 0x1, [r0, r11]}], 0x38, 0x810}, {&(0x7f0000002c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002e80)="1a51213fff6bfa03b6b8ba8f8e67daae30ea990e0d80fac6752f1164f97118d9d6b4bb27ca2453abd5f7e226c9c5a23ad3f3d8814554d89db99c315dae56a89291737550ff5e9821c37449b3ee0d60f625d3ed04f6012eab4e36f34b71d860d11d3627c36b12b1caf7c8dab8d99f9143dede44acb757d905977ff77f48ae95b1ef8308ed7dd03214771edc1abcf5a3b2fc36c8599f6e13e8bb0a3822", 0x9c}], 0x1, &(0x7f0000002f80)=[@rights={0x20, 0x1, 0x1, [r1, r5, r13]}, @rights={0x18, 0x1, 0x1, [r6]}, @rights={0x28, 0x1, 0x1, [r0, r1, r6, r0, r2, r5]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x80, 0x10}, {&(0x7f0000003080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003100), 0x0, &(0x7f0000003140)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r12]}, @cred={0x20, 0x1, 0x2, r8, r9, r4}], 0x58, 0x8001}], 0x4, 0x0) r15 = memfd_create(&(0x7f0000000400)='eth1\x00', 0x0) keyctl$get_security(0x11, r14, &(0x7f00000003c0)=""/5, 0x5) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000540)=0x10, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) sendfile(r11, r11, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r11, 0x4c01) ioctl$LOOP_SET_FD(r15, 0x4c00, r12) 00:53:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="0f0000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0203539d38ad133d055ef29dc5453fc9586a54590e0d8482387ea9f9f6d4d59e29b56b30ed992dd9c5319049b257047352f2e80a866e9397e8f80a3f97e84b902bef43bc5bcdb32d42468e21d8f1e3214c125f4bf8a9a33f2d5494410662ca15659db9292214ef4672841292f4de954f50a514c9a52374397c8ed74d6714bac2e121e6dea806d641d4d805ea4cf5fa66dd023d8d516375f10e850aabaabd89364b61c9d4b7873e64fb"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0184908, &(0x7f00000002c0)) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/34, 0x22}], 0x1, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) 00:53:20 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="effd00001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, r2}, 0xc) close(r0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0xdc}}, 0x1e) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x10001, 0xfffffffffffffffd}) 00:53:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="a40000201a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:20 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80083, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/178) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0xffffffffe) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@dev, @rand_addr}, 0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x2}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r2, 0x0) 00:53:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0xfffffffffffffffe, 0x200, 0x4, 0x6, 0x0, 0xffffffff, 0x21, 0x0, 0x0, 0x81, 0x0, 0x0, 0xe4c4, 0xd3, 0x81, 0x0, 0xffffffff, 0x401, 0x1d5b, 0x677, 0x0, 0x5, 0x3, 0x0, 0x7, 0x101, 0x7, 0x50f1, 0x5, 0xf8, 0x1, 0x6991, 0x80000000000, 0x3, 0x0, 0x4, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x0, 0xec, 0x0, 0xb7, 0xfffffffffffffff9}, r2, 0x10, r1, 0x1) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000712600000000000035060000ff000000bf25000000000000070500000e0000000f65000000000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d43010000000000950000000000000061540000000000006b25000000000000070500000e0000000f6500000000000007050000040000000f65000000000000bf543d3201000000000095000000000000004d54000000000000b70000000000000095000000000000000000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x1f000000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r3, 0x4d1, 0x3, 0x9, 0x0, 0x6}, &(0x7f00000005c0)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0x8000}}, [0xff, 0x101, 0x7, 0xfffffffffffffffb, 0x9, 0x8, 0x401, 0x9, 0x9, 0x4, 0x7, 0x2, 0x1, 0x10000, 0x6]}, &(0x7f0000000440)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x2, 0x4, 0x0, 0x100000000, 0x1, 0xffffffffffffffff, 0x7, 0x5, r4}, &(0x7f00000004c0)=0x20) 00:53:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6172d8f5b38866d0008034ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x0, 0x2}, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) close(r0) 00:53:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="e03f03001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:20 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:20 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000102ff05fd4354c007f37ffff20501001ab527cc3f62ec5782b4310800010004000100ffdf00384b5088cd5b75508cd667b2d8c074c682b6e03158d6b8a893771f9dab20f4d19f9e462d68cfb7e63538b4835a0536049bcb3615fee71191e439d5d4036c9446fc1791f21825bda721347b5606c491c0d5383e8b1af646f3", 0x308) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x200, 0xffffffffffffffff) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x0) 00:53:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="1b0000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x400) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) [ 276.596597] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. 00:53:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="c00e00001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:20 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 276.665327] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. 00:53:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x12) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x4a6, 0x1, 0x800, 0xcb, 0x0, 0x0, 0x8001, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x6, 0x100000000, 0x0, 0xa2f, 0x1}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r2, 0x7}, 0x8) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x51, 0x400000002}], 0x579) 00:53:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="100000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:21 executing program 0: gettid() r0 = gettid() waitid(0x2, r0, &(0x7f00000001c0), 0x1000005, &(0x7f0000000200)) 00:53:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ffe3b7"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:21 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:21 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockname$inet6(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x1c) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r2) r3 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) listen(r3, 0x9) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000340)=r2) sendto$inet6(r4, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000]}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f00000000c0)=0x98) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x40000000) pipe2(&(0x7f0000000240), 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)={0x1, [0x8]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100}) 00:53:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24000000670001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(r1, &(0x7f0000000280)=""/198, 0xc6, 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000100)=""/191, &(0x7f0000000040)=0xbf) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x43, 0x0, 0x5}, 0xa5c}}, 0x18) close(r1) 00:53:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80, 0x10000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0xff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) accept4$alg(r0, 0x0, 0x0, 0x80000) [ 277.601192] sched: DL replenish lagged too much 00:53:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="247301001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 277.704490] IPVS: ftp: loaded support on port[0] = 21 00:53:22 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:22 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5d, 0x521043) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x412900) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xb9) keyctl$get_persistent(0x3, r2, 0x0) 00:53:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400f0001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) write(r0, &(0x7f0000000040)="0f75391b1fe25a2bf495d064315895d54cf6c06df6b2", 0x16) close(r0) 00:53:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 278.028474] IPVS: ftp: loaded support on port[0] = 21 00:53:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x64b, 0x2, [0xa48, 0xff]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x3}, &(0x7f0000000300)=0x8) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$alg(r0, 0x0, 0x0) r4 = dup2(r3, r0) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000040)={0x0, 0x6, 0x5, 0x400}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e24, 0x3, @mcast1, 0x401}, {0xa, 0x4e21, 0x0, @loopback, 0x3ff}, 0x51, [0x33588105, 0x2, 0x1, 0x1, 0x1, 0x3, 0x1, 0x100000001]}, 0x5c) 00:53:22 executing program 3: socket$inet6(0xa, 0x80003, 0x0) r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x60903) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0x1, 0xfffffffffffffff9}) 00:53:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24fec0001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000059a46f095ed969fc67f2b78938073121450000"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000808}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="00032cbd7000ffdbdf25110000004c0003001400020076657468315f746f5f626f6e64000000140002006970365f7674693000000000000000000800010000000086329dcb7c7b242f640008000500ac141415080008000000000008000500ffffffff0800050009000000080004000900000008000500040000001c000100080006006c630000080002000100000008000800030000000800050001000000080006000100010008000400140a000084b73ea9b807a93c95e3861d60bd943d6e"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x20040054) 00:53:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24f000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:22 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000015c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x401, 0x7, 0x200, 0x2, 0x59}, &(0x7f0000001680)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001a40)={0x0, 0xca, "54513ff760e0a335c2667e096aa5447bbfcee6aaa9335e0a60a2697d3c2efab2633f14454ff2ec2d993fe1be7829d032e8e2a2a1f958c666ad3ff6f1c0f06a841711a375eea52b1e7f3ada93e199b1cbebe2974472b7412e300a125a5bbcafb6a676278a5c07806c83fcc05058121112be198adb8e0c7ba4d78b386f4d9edc77187ed23c895a5c926af1df784de0928b2339a2c174b4998a88988256bc77d75c50abe8e27e7f7fde612c36aaacfbdf672bde1fa90edf72bacd7996bf28b70cb63a40ad17a7a6bbff7330"}, &(0x7f0000001b40)=0xd2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x7, 0x4}, &(0x7f0000001bc0)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002d80)={0x0, 0x101, 0x9, [0x3, 0x8, 0x1, 0x0, 0x7, 0x2, 0x6, 0x8000, 0x80]}, &(0x7f0000002dc0)=0x1a) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002e00)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000002ec0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000003100)={0x2, 0x8, 0x1, 0x200, 0x0}, &(0x7f0000003140)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003200)=[{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0xc}, 0x173}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f00000033c0)=ANY=[@ANYBLOB="180000000000000084000000000000000800ffff06001f0018000000000006000100920926ca8ecbc5aafca303a0f0e1fe3112e88239a85ceabb8ada951504e14a4a7945b47d24e9e79972aa4d549e62f43f108a169543f96bc8511e7e0c48ec9a50a7cc8d04d3b776e10fec944e749b62b19651b57e6efc382174f3973f01fbe7d7ed102606d4a408286b38129320"], 0x30, 0x8804}, {&(0x7f0000000140)=@in6={0xa, 0x4e24, 0xfffffffffffff83d, @ipv4={[], [], @local}, 0x6}, 0x1c, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@init={0x18, 0x84, 0x0, {0x5, 0x8, 0xfffffffffffffc00, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}], 0x48, 0x8001}, {&(0x7f0000001280)=@in6={0xa, 0x4e24, 0x1e8a, @mcast1, 0x9}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000012c0)="a85df44f4f3a455abceb53e09d3373a2c50e1fef80398d6310325be7c5308d2aa3f2ccbd6a4923244e038bb466124be858a339b56e4d301614e1584626085efec97e5d6bdd539d3b25279b23510ebbb67d0c5fe5e0bceeb907c828cf09f1152e51067b905f2ecb06ad", 0x69}, {&(0x7f0000001340)="55c4d7d6814b136696f035cf4b4a85248732c9b4e4a41e7944ed5901ee17b288bcf5dbbb5c25eba7008b6082fb2b979d63b92dbf825df58fecb2c1", 0x3b}, {&(0x7f0000001380)="23a52055d3a92b5f9ac940bb7a6ebffef6dc43371b139c05c3c089944717cb7b82a5a62a7b650b33d658c65242a4e7de0f867e2fe60fd3b499bba1ef9c1d608252029990383f7f96c5fe345cfa4fe3cbdb72bf54d6fc9b9595f76668f23079fb97f47a1b6143ec8a6d9e883c0f7bcaa47d2dac5c398cd590d2b39bf3b9d50534e3d4e4d9f7bceb8ffba4de0c31c8c71910462b0b252f246734f97df64797604f4c927e8d7329044bee41d460c2c4ae2a9f20bfc07d10e1d1cd4901c2df904493969736e49dceacc2c2a3b7af", 0xcc}, {&(0x7f0000001480)="c78dbdcb7575b259a1abcacf9bbe1b482b7e3823eb31f7859f5f3153c1e5f3e0ab7c9a9a7d017a4a79db9fdbe0231f0c169de1", 0x33}, {&(0x7f00000014c0)="9f384fd5a9ec371a23813d94a6d5e3fd15952524fe1dca1453528fb3b1dba18b4806ce099e3c7922d679d42f679a684b16553cde8129a6f96f2a4e1fe71875873a49415205147963382094b9051167", 0x4f}], 0x5, &(0x7f00000016c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x800d, 0x8, 0xffffffff00000001, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x19}}], 0x60, 0x40800}, {&(0x7f0000001740)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001780)="8e26efc3a07b5cc7c40f40c1797f2decdad3dbbdbf7bf4cf175dce569256191700b1d3fda171a44081eafb75e30a3d85f1fc0a1a7ccecda855347e86a95ebc5cc99a2be834e5a6d33bc6a1a6b4df35d8b73dc790cd79e96badba7f61a98bbaee529a609ed8b43be4a5556fed24484e8b967b11ee2b5cec5c7524a73b41e3df0d8a28f5", 0x83}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000001880)=@in6={0xa, 0x4e22, 0x6, @loopback, 0x2}, 0x1c, &(0x7f0000001a00)=[{&(0x7f00000018c0)="0d1a0aec36e946142a04e33201c7c77f3bea3ef5284879fc182a1964a31fef87f2d7cbf486f650a1a2d0337cb4ef5fa5d71f3edf21fee82398db67cd49ef1cbfc33186879adc0b43376cef4f92ca9b02d86ff1abab5c882d7b97b2ebcbe3a6f497237a8b9585232e2fb6998ebe38d3f0b45c423c642b24a7745f35bf80fad0bc1d5e3a1da29bf4cd05a6fff44682368a8cd40f5f9812234a33f031b4aaef466425de9d47b6aa35ba9c8e8d2666165054f25f7e3b5adfbf7ecb1c8a71097263695797e46571718e1e8b445fe15f13200d735b56ad6ee28b1c10d727169cda0f4c559c0f70895bbc6ac6f76a5df06e2016e0bfbf30aa", 0xf5}, {&(0x7f00000019c0)="a4121af1e56e596de9bd77d2f9ba1f99ea0fbd58fba71f2df32be51e3f8978fac506a66f7a0796d01d786460cca11ca963b393647af95cce", 0x38}], 0x2, &(0x7f0000001c00)=[@init={0x18, 0x84, 0x0, {0x5, 0x3, 0x1, 0x7}}, @init={0x18, 0x84, 0x0, {0x8, 0x1ff, 0x4, 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x10000}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x204, 0x0, 0x7, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x15}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0xe, 0x26733c43, 0x2, r3}}, @init={0x18, 0x84, 0x0, {0x3, 0x10, 0x84, 0x100000001}}], 0xe0, 0x4001}, {&(0x7f0000001d00)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000001d40)="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", 0x1000}], 0x1, &(0x7f0000002f00)=[@sndrcv={0x30, 0x84, 0x1, {0xcd, 0x0, 0x8208, 0x9, 0x0, 0xfff, 0x1ff, 0x972, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xb1a0}}, @sndinfo={0x20, 0x84, 0x2, {0x1f, 0x8000, 0x81, 0x7c, r5}}], 0x68}, {&(0x7f0000002f80)=@in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @broadcast}, 0x3}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002fc0)="c4807b75a6ddcff770001997368c72585bfd16ae1eee937d3c6f1ce2037731c249edd9c32df00326e872815e1a7bfb4b21dc6be2931467adccc8fb83d04787ab631ca4c62d78416d2a78aa2834c44ec554d15b357ca57cfc4e0a023e22fe1e2313c8b4303b95a95672a4ecc3e99b4603d1666029003798d57c1dc04b22bcbacb96bd04407e95f00443c93198a6871311bb779855174f402fc3c746200b9c5b97d025aa322960d8921ef1b18cde1219eb61f0", 0xb2}, {&(0x7f0000003080)="726972f64caef9db545ddbccb75edc530a5af32fc6dac0a504ced81921b4b5364498fd22172fa3bac07eeda2bc48ecd60aab32585f993317e33cb4", 0x3b}], 0x2, &(0x7f0000003180)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x18}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1d4, 0x1, 0x7, 0x2, 0x3, 0x100000000, 0x7, r6}}], 0x68, 0x40080}], 0x7, 0x4054) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240), 0xc) close(r0) 00:53:22 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240f00001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:22 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00003cefe4)={&(0x7f0000000000)={0x10, 0x34048}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000805700fd0600a20000000000000000000095ad558fd9d543498544177cc089225dd13047674f3fcbf3a7cd2006c9cf1addfead04ba9200e1166eabf4debb174ca63d24"], 0x14}}, 0x0) 00:53:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="b8010000000f01c1c48241a7970100000066ba6100ec66baf80cb8b0c2e984ef66bafc0cb800200000efb8010000000f01d9c402c9384925400f352e36440f35c4a161ed4b5f66baa000b000ee", 0x4d}], 0x1, 0x62, &(0x7f0000000140), 0x0) close(r1) 00:53:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240200001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:22 executing program 4: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0xffffffffffffffff) 00:53:22 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:23 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:23 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/170, 0xaa) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r1, 0x500, 0x70bd27}, 0x14}}, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0) epoll_create1(0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x50, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3) sysfs$3(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40) 00:53:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24003f001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:23 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="ff80e83ab87c7ddfaaa65eb2e820d0d1df575566e51aaaf1b05f7a15a1a8124d0488713b5b209216ab08b62b236d966698aac168f1c3b13ce3f980216f254f20451b7bbb96343c16e0364af5fcbad9e9ed9617e0bca70f0d24a7262d7265c330861bae8bc883610b8b1de6c2a4470414f73afcf5467315fd7a99e9ff12ad38b10dfcafde14b3cf"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x1, 0x75, &(0x7f00000000c0)="c858e487aa45cf9e9cf15b785840de8f80da8a05c824eb98d046d2c453b22bc8e0fd99d964350a5994d3c280feb44804f565df74cb6c577856c374b45e482c31dc8968d8ee86e2eee662669b81f62eebd7dee343aa7b01764fc5d50f130af9793ffcc78d0e0b023a3a248823c42d9b8aeb02cd2840"}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x1, @random="863f01146df6"}, 0xaf1ae2445ec2446b, {0x2, 0x4e20}, 'dummy0\x00'}) 00:53:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:23 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240003001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:23 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:23 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d86"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240060001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:23 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff3f02a70040000000000000000af9efa2dbfb3388a93b419e8200000006"], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x4, 0x80000000, 0x401, 0x100000001, 0xffffffffffffff1a, 0x9, 0x9, 0x55, 0x81, 0xc72, 0xffffffffffffff35}) 00:53:23 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/170, 0xaa) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r1, 0x500, 0x70bd27}, 0x14}}, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0) epoll_create1(0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x50, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3) sysfs$3(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1', "b0518c63e60262b3080db2c250a325e20be319be0f679cf9c0e2d17001c80f8ca2db2b7e833a6352a6a0ebdad148e39ca84887c4e530bd84343a1d6c"}, 0x40) 00:53:23 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:23 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="b8010000000f01c1c48241a7970100000066ba6100ec66baf80cb8b0c2e984ef66bafc0cb800200000efb8010000000f01d9c402c9384925400f352e36440f35c4a161ed4b5f66baa000b000ee", 0x4d}], 0x1, 0x62, &(0x7f0000000140), 0x0) close(r1) 00:53:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2480fe001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:23 executing program 2: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0xc) close(0xffffffffffffffff) 00:53:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400ff001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:23 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x100, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000240)=0x78) clock_gettime(0x6, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={r1, r2+30000000}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000000080), 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14) 00:53:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:24 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)) close(r0) 00:53:24 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000000f0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:24 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xc5) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @broadcast, @multicast2}, &(0x7f0000000540)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f00000007c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000800)={@local, 0x0}, &(0x7f0000000840)=0x14) accept4$packet(r0, &(0x7f0000003a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003a40)=0x14, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003c40)={{{@in=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000003d40)=0xe8) accept$packet(r0, &(0x7f0000003dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003e00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000003e40)={@loopback, 0x0}, &(0x7f0000003e80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003ec0)={{{@in6=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000003fc0)=0xe8) accept4$packet(r0, &(0x7f0000004100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004140)=0x14, 0x800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004180)={0x0, @empty, @dev}, &(0x7f00000041c0)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f0000004200)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004280)=""/12, 0xc}, {&(0x7f00000042c0)=""/3, 0x3}, {&(0x7f0000004300)=""/129, 0x81}, {&(0x7f00000043c0)=""/20, 0x14}, {&(0x7f0000004400)=""/19, 0x13}, {&(0x7f0000004440)=""/151, 0x97}, {&(0x7f0000004500)=""/182, 0xb6}, {&(0x7f00000045c0)=""/173, 0xad}, {&(0x7f0000004680)=""/187, 0xbb}], 0x9, &(0x7f0000004800)=""/58, 0x3a, 0x1f}, 0x3}, {{&(0x7f0000004840)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005dc0)=[{&(0x7f00000048c0)=""/196, 0xc4}, {&(0x7f00000049c0)=""/114, 0x72}, {&(0x7f0000004a40)=""/20, 0x14}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/110, 0x6e}, {&(0x7f0000005b00)=""/90, 0x5a}, {&(0x7f0000005b80)=""/199, 0xc7}, {&(0x7f0000005c80)=""/163, 0xa3}, {&(0x7f0000005d40)=""/85, 0x55}], 0x9, &(0x7f0000005e80)=""/69, 0x45}, 0x4}, {{&(0x7f0000005f00)=@ax25, 0x80, &(0x7f0000006040)=[{&(0x7f0000005f80)=""/153, 0x99}], 0x1, &(0x7f0000006080)=""/237, 0xed, 0x5}, 0x1fffe}], 0x3, 0x40002100, &(0x7f0000006240)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006280)={'yam0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000062c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006300)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000006400)=0xe8) getpeername$packet(r0, &(0x7f0000006440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006480)=0x14) recvmmsg(0xffffffffffffff9c, &(0x7f0000007bc0)=[{{&(0x7f0000006580)=@can={0x1d, 0x0}, 0x80, &(0x7f0000007ac0)=[{&(0x7f0000006600)=""/112, 0x70}, {&(0x7f0000006680)=""/166, 0xa6}, {&(0x7f0000006740)=""/170, 0xaa}, {&(0x7f0000006800)=""/164, 0xa4}, {&(0x7f00000068c0)=""/139, 0x8b}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f0000007980)=""/94, 0x5e}, {&(0x7f0000007a00)=""/127, 0x7f}, {&(0x7f0000007a80)=""/43, 0x2b}], 0x9, &(0x7f0000007b80)=""/44, 0x2c, 0x1}, 0xa16}], 0x1, 0x2000, &(0x7f0000007c00)) getpeername(r1, &(0x7f0000007c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007cc0)=0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000007d00)={0x0, @rand_addr}, &(0x7f0000007d40)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008000)={'bond_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000008840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000008800)={&(0x7f0000008040)={0x78c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x100, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4, 0xfffffffffffffff7, 0x80, 0x5be}, {0x100000001, 0x2, 0x7, 0x1f}, {0x1, 0xfc0000000000000, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3fba}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff8001}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff7}}}]}}, {{0x8, 0x1, r15}, {0x220, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r17}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2966facd}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r19}, {0x1b0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x62}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xe60}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x0, 0x4}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e22, 0xae, 0x4e24, 0x100, 0x2, 0xa0, 0xa0, 0x0, r4, r5}, {0xf448, 0x7, 0x6, 0x100000000, 0x18e, 0x2db46309, 0x100000001, 0x2}, {0x10000, 0x5, 0x8, 0x3}, 0x0, 0x6e6bb7, 0x2, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in=@remote, 0x3504, 0x2, 0x0, 0x3, 0x40, 0x7, 0x9}}, 0xe8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$KVM_RUN(r6, 0xae80, 0x0) fremovexattr(r7, &(0x7f0000000180)=@known='trusted.overlay.origin\x00') 00:53:24 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:24 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24fe80001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:24 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:24 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r1) 00:53:24 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240300001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:24 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000300)=""/68) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) [ 280.254086] *** Guest State *** [ 280.270218] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 280.300876] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 280.344523] CR3 = 0x0000000000000000 [ 280.354750] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 280.371761] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 280.390498] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 280.414084] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 280.423115] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 280.430726] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.441721] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.457980] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.476078] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.504524] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.517869] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.529357] GDTR: limit=0x00000000, base=0x0000000000000000 [ 280.538519] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.548159] IDTR: limit=0x00000000, base=0x0000000000000000 [ 280.557080] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 280.567102] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 280.574620] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 280.583001] Interruptibility = 00000000 ActivityState = 00000000 [ 280.590282] *** Host State *** [ 280.593915] RIP = 0xffffffff81212b2e RSP = 0xffff88017fb4f350 [ 280.601193] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 280.608067] FSBase=00007fcc1de85700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 280.616699] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 280.630049] CR0=0000000080050033 CR3=00000001d2c3a000 CR4=00000000001426f0 00:53:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffffffffff83, 0x10000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000340)=0xe8) getgroups(0x9, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x0]) r10 = getuid() getgroups(0x3, &(0x7f00000003c0)=[0xee00, 0xee01, 0xffffffffffffffff]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) eventfd2(0x5, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000006c0)=0xe8) r15 = getgid() r16 = getuid() setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000001000)={'filter\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) fstat(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r3, &(0x7f00000010c0)='./file0\x00', 0x74b48cbcf3262dab) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000009c0)={0x5b0, 0x0, 0x3, [{{0x3, 0x3, 0x3, 0x9, 0x10, 0x5c, {0x0, 0x7fff, 0x7, 0x0, 0x63, 0x400, 0x8, 0x3465f5a2, 0x1000, 0x6, 0xfffffffffffff000, r4, r5, 0x2, 0x53}}, {0x1, 0x7fff, 0x1, 0x3, '/'}}, {{0x3, 0x0, 0xe000000000000000, 0x5, 0xac, 0x7, {0x4, 0x100000000, 0xffffffff, 0x2400, 0x9, 0x1f, 0x25, 0x2, 0x3f, 0x6, 0x6, r6, r7, 0x7ff, 0x1ff}}, {0x5, 0x8, 0x5, 0x4, 'ppp1/'}}, {{0x3, 0x1, 0x4c, 0x9, 0x4, 0x0, {0x4, 0x401, 0xfffffffffffffffc, 0x7ff, 0x6540c584, 0x3, 0x1, 0x7fffffff, 0x2, 0x8, 0xd178, r8, r9, 0x2, 0x7}}, {0x1, 0x0, 0x9, 0x9, '/dev/kvm\x00'}}, {{0x2, 0x1, 0x7fffffff, 0x200, 0x9, 0x2, {0x1, 0x5, 0x61, 0x10000, 0x0, 0x8, 0x100, 0x3, 0x4, 0x3, 0x8, r10, r11, 0x6, 0x4a76}}, {0x2, 0x4800000000000, 0x0, 0x8000}}, {{0x6, 0x2, 0x60, 0x7, 0x95, 0x3ff, {0x5, 0x3, 0x81, 0x3, 0x5, 0x200, 0x1, 0x3, 0x1, 0x8, 0x4, r12, r13, 0x20, 0xfffffffffffffff9}}, {0x3, 0x0, 0x5, 0x3, 'wlan0'}}, {{0x3, 0x0, 0xffffffffffff2327, 0x40, 0x10000, 0x71c5, {0x0, 0x0, 0x227d3a45, 0x3ff, 0xff, 0x100000000, 0x80000001, 0x6, 0x8, 0x6, 0xaa, r14, r15, 0x2, 0x993}}, {0x3, 0x4, 0x0, 0x6}}, {{0x4, 0x0, 0x5, 0x2, 0xf44, 0x7, {0x1, 0x8000, 0x58, 0xe63, 0x3, 0x3f, 0x1, 0x9, 0x4e2c, 0x2, 0x80, r16, r17, 0x4, 0x1}}, {0x2, 0x9608, 0x9, 0x0, '/dev/kvm\x00'}}, {{0x0, 0x2, 0x7, 0x9, 0xd92, 0x7, {0x0, 0x100000000, 0x7, 0x80000001, 0x81, 0x2, 0x9b9, 0x1, 0x1, 0x3, 0x8, r18, r19, 0x0, 0x8001}}, {0x5, 0x681a, 0x0, 0x3f}}, {{0x4, 0x3, 0x0, 0x6, 0x6, 0x3, {0x2, 0x8001, 0x9, 0x3, 0x3f, 0x1, 0xff, 0x7fff, 0x6, 0x90000000000, 0x7, r20, r21, 0x4, 0xf8b1}}, {0x5, 0x817, 0x9, 0x4, '/dev/kvm\x00'}}]}, 0x5b0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000004005010040000017"]) 00:53:24 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24d705001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:24 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:24 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) bind$bt_hci(r1, &(0x7f0000000240), 0xc) getsockname$netlink(r0, &(0x7f0000000780), &(0x7f00000007c0)=0xc) close(r0) sendmmsg$alg(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="78dc942459bc17e436a81c18b9afdf9f1d60b1d5484f89b072b43fba360fccb94ada765f471c71d6ddd808c4c082ac2417d368b78394545d03bee25d44caeab10946ababed2198398dd7d8a4190da38b930ec0c7966cbea553e2e183f7af0570f348e39f29", 0x65}, {&(0x7f0000000180)="38d56335e915cd1416777fdafb684926c2a2d1ca4cb1c153a5d3c61752fa2ce53ca21cf38883a503d3167525979efd778a9c8db7f34414d51099624dd18b6f9618491b0848756d12186301b30bc6bc0924af71ef6866c3a2e65aa009709daddefefd2f97b2113a45c88b2c70f14cee233ca91f5e91d9e2075eed92552d28f0bcc5d45152d810bac711213f791892e612641873df512555378307333e401c995709503648705810fe5fcb", 0xaa}, {&(0x7f0000000280)="2630695baa4f058c1535d3c80abd7e9eb9e0bea6fa2675527dfb8a85cdb57d29cc23cd84e8ab79f90f02902744027dd86bb6be4d56c237cd72224282f21b699433e48c4e6c26dc40ee674a181ea48d38cd556538a98d1e7f9c7052fc0fa7", 0x5e}, {&(0x7f0000000300)="1e79e6b7d64961d5316641680e91f525271bc9d9be6b7647857dd74de4dbe33e8429bc5f31dd83b866a014fd14a3fa870668ab2e058055924923d7a18e37d974064ed24c2e1cfccee4bf069d941f377fe7eb5226e8de54932418fb59f84199b3120c324ea006e8adeaba75ff0bcfbe9cb429eb35bcbe7348ed346d1eb985e5d8df4c7d2e437e1c1f1c2882b3df497d29239720", 0x93}, {&(0x7f00000003c0)="a3cc1ecad37c62973121e81f9ab9689f6bd514c2c9c36a00bb1b5b475c7593c1d9d98c511ad81a00325781b405a562b2375cf9cdadbbb4bf0100c7839d65fbe245c27a7cdf20bcb25d87a7af04224d7d4dd6d89a1e17177426ac171a346a84df8b208e84aac9f4edddc17ec71a7763c32e4c56ba2d726fee81726afc51ee7c97cb0df9493aa920922549832bd9ab37023660f88fc382f9d2fc7c78120094034aea2643faaed4c5ab0fb92d594b8cb1fd2f5a033c6cba40b8f7181e3e243682", 0xbf}, {&(0x7f0000000480)="e3fb3685788f8781a5a98e24f1358f15e7c9ecc2714b3cc6984fae4e42298a8db1bed1eb24a36dbb133ec578edb002881efecdd06b8b10546ef79698368cf48932348c8366eb103933474792512e26676f05257385d235df00e71cc9511ab1a51adc4ef6335b4daa3e97f07cd3249abce1eb3fad2e48292313478957f83bc2f2240aefed35cd51e8122c9b10444d079bf9fd83135efdcef6dfb1003b6bbdd65ed53766b296769a561573c5837011f5c1f3568f674893a7bd8024c240ecb5412ad7db87e2f098bba540ef", 0xca}, {&(0x7f0000000580)="75a6ce9e208e3c27f8fddc07d1819ce3047558a27b82dfec8d05e008c67e2770443951705c195362fd78641e6502d8ab319a9fad004c131f414c169204f5fb7fe3ec6430256444176db5af9c6f834c8f677c1493be16d09d558ac0ef54aedf2bc5e1f12ec5bce68e", 0x68}, {&(0x7f0000000600)="23be6dcbf842424cacf59f5c0745ff16a34144c4b5325ad94838d220a39e6af725856e3070a5c24a7f6a5f1db51f8548eb3236bdd039c89b6090dc59c5f2f801d429cdad3b476d88f04f09f832132008709075cdd6145bde1aa6bdcf36b2f6757f338e61d0e8192665cd7ae5ab901fb7157a6a", 0x73}], 0x8, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x48, 0x4}], 0x1, 0x20000000) accept$alg(r0, 0x0, 0x0) 00:53:24 executing program 1 (fault-call:11 fault-nth:0): io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 280.649924] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 280.657082] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 280.666486] *** Control State *** [ 280.670964] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 280.723181] EntryControls=0000d1ff ExitControls=002fefff [ 280.733679] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 280.750937] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 280.764427] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 280.782959] reason=80000021 qualification=0000000000000000 [ 280.795215] IDTVectoring: info=00000000 errcode=00000000 [ 280.844331] TSC Offset = 0xffffff67fc950a7c [ 280.889083] EPT pointer = 0x00000001bfd4501e 00:53:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x0, 0x4}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e22, 0xae, 0x4e24, 0x100, 0x2, 0xa0, 0xa0, 0x0, r4, r5}, {0xf448, 0x7, 0x6, 0x100000000, 0x18e, 0x2db46309, 0x100000001, 0x2}, {0x10000, 0x5, 0x8, 0x3}, 0x0, 0x6e6bb7, 0x2, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in=@remote, 0x3504, 0x2, 0x0, 0x3, 0x40, 0x7, 0x9}}, 0xe8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$KVM_RUN(r6, 0xae80, 0x0) fremovexattr(r7, &(0x7f0000000180)=@known='trusted.overlay.origin\x00') 00:53:25 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24000f001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:25 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x7, 0x9, 0x9, 0x9, 0x0, 0x5e7, 0x2800, 0x4, 0x0, 0xffffffffffffff82, 0x1, 0x81, 0x4, 0xfffffffffffffffb, 0x2, 0x3f, 0x8, 0x800, 0x6, 0x401, 0x5, 0x1, 0xd3a, 0xe844, 0x3, 0xe, 0xbc8e, 0xffffffffffff7fff, 0x3e24c79a, 0x1000, 0x9, 0x5, 0x5, 0x8, 0x9, 0x1, 0x0, 0x4e, 0x1, @perf_config_ext={0x492, 0x333}, 0x20, 0x5, 0x2, 0xd6d592fc2c304eb8, 0xb4af, 0x1, 0x4}, r1, 0xa, r0, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x3}, @in6={0xa, 0x4e20, 0x7, @local}, @in={0x2, 0x4e22, @broadcast}], 0x58) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) timer_create(0x1000000000000003, &(0x7f0000000200)={0x0, 0x11, 0x1, @tid=r1}, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x3, 0x4}) close(r0) 00:53:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x10000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x5014, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040)}) 00:53:25 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:25 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x0, 0x4}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e22, 0xae, 0x4e24, 0x100, 0x2, 0xa0, 0xa0, 0x0, r4, r5}, {0xf448, 0x7, 0x6, 0x100000000, 0x18e, 0x2db46309, 0x100000001, 0x2}, {0x10000, 0x5, 0x8, 0x3}, 0x0, 0x6e6bb7, 0x2, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in=@remote, 0x3504, 0x2, 0x0, 0x3, 0x40, 0x7, 0x9}}, 0xe8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$KVM_RUN(r6, 0xae80, 0x0) fremovexattr(r7, &(0x7f0000000180)=@known='trusted.overlay.origin\x00') 00:53:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:25 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24c0fe001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:25 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000006c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000001c0)={@hyper}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x42000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xf6, 0x80, 0xf3, 0x4, 0x7fff}, &(0x7f00000009c0)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000a00)={r3, 0x2f56b17a}, &(0x7f0000000a40)=0x8) getpid() sched_setscheduler(0x0, 0x7, &(0x7f0000000880)=0xfffffffffffffffd) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) fstatfs(0xffffffffffffffff, &(0x7f0000000300)=""/158) mknod$loop(&(0x7f0000000800)='./file1\x00', 0x800000000001000, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0200aaaad491e2f8e1c7c2f5d58d224fe1ab565f4c05010fed36febfcf358cf4ee83cb0d8c4f425854964d2cd90608b214743a9e19f0634dbbe43a4a9523ba5ec022aed8b2b8a75b8582a8e2833eb38715788feb24c0c379037b3e5d80039b8739a80fdceb7bdada000000000000000000000000"], 0x1}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000008c0)) 00:53:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x0, 0x4}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e22, 0xae, 0x4e24, 0x100, 0x2, 0xa0, 0xa0, 0x0, r4, r5}, {0xf448, 0x7, 0x6, 0x100000000, 0x18e, 0x2db46309, 0x100000001, 0x2}, {0x10000, 0x5, 0x8, 0x3}, 0x0, 0x6e6bb7, 0x2, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in=@remote, 0x3504, 0x2, 0x0, 0x3, 0x40, 0x7, 0x9}}, 0xe8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$KVM_RUN(r6, 0xae80, 0x0) fremovexattr(r7, &(0x7f0000000180)=@known='trusted.overlay.origin\x00') 00:53:25 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240173001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff"], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 281.468480] *** Guest State *** [ 281.501061] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 281.550084] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 281.588559] CR3 = 0x0000000000000000 [ 281.598757] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 00:53:25 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) close(r0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000140)=0x8ac) 00:53:25 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2405d7001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 281.617323] *** Guest State *** [ 281.630104] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 281.636977] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 281.643687] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 00:53:25 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0x4000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/68) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000001970004020001000500"], &(0x7f0000000180)=0xe) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 281.670964] RFLAGS=0x00000002 DR7 = 0x0000000000000400 00:53:25 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 281.704783] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 281.730158] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 281.736988] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.743559] CR3 = 0x0000000000000000 [ 281.760438] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 281.770525] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.783816] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.795200] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 00:53:26 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="246000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 281.805726] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.815584] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 281.822390] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 281.828957] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.838111] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 281.876396] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.897565] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.900962] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.946390] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 281.959957] GDTR: limit=0x00000000, base=0x0000000000000000 [ 281.984703] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 282.000133] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 282.035023] IDTR: limit=0x00000000, base=0x0000000000000000 [ 282.039185] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 282.056562] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 282.081139] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 282.085522] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 282.096369] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 282.107399] GDTR: limit=0x00000000, base=0x0000000000000000 [ 282.115788] Interruptibility = 00000000 ActivityState = 00000000 [ 282.115795] *** Host State *** [ 282.115809] RIP = 0xffffffff81212b2e RSP = 0xffff88017e92f350 [ 282.115833] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 282.115847] FSBase=00007f5077549700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 282.115860] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 282.115877] CR0=0000000080050033 CR3=00000001b7ff2000 CR4=00000000001426f0 [ 282.115894] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 282.115907] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 282.115912] *** Control State *** [ 282.115923] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 282.115932] EntryControls=0000d1ff ExitControls=002fefff [ 282.115947] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 282.115957] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 282.115967] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 282.115976] reason=80000021 qualification=0000000000000000 [ 282.149676] IDTVectoring: info=00000000 errcode=00000000 [ 282.152342] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 282.159129] TSC Offset = 0xffffff6757904ca0 [ 282.159144] EPT pointer = 0x00000001c58f901e [ 282.167258] IDTR: limit=0x00000000, base=0x0000000000000000 00:53:26 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:26 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:26 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f7806ca3aa732f26542e97f133c0950368f15246989d121efa49df79309fe6cf53f55dd034135db71dbf49976ca0adcf78aa285737d69a691b14b34aa6fa16b2b4ed092c876f3b59397f1d1da96150c3d32227314945c3edb6"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) 00:53:26 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24fc00001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 282.258741] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 282.272158] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 282.278716] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 282.287082] Interruptibility = 00000000 ActivityState = 00000000 [ 282.325493] *** Host State *** [ 282.343591] RIP = 0xffffffff81212b2e RSP = 0xffff88017e897350 [ 282.353144] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 282.399783] FSBase=00007fcc1de85700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 282.407850] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 282.427563] CR0=0000000080050033 CR3=00000001cf3a1000 CR4=00000000001426f0 [ 282.470585] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 282.477287] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 282.509685] *** Control State *** [ 282.513281] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 00:53:26 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000006c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000001c0)={@hyper}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x42000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xf6, 0x80, 0xf3, 0x4, 0x7fff}, &(0x7f00000009c0)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000a00)={r3, 0x2f56b17a}, &(0x7f0000000a40)=0x8) getpid() sched_setscheduler(0x0, 0x7, &(0x7f0000000880)=0xfffffffffffffffd) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) fstatfs(0xffffffffffffffff, &(0x7f0000000300)=""/158) mknod$loop(&(0x7f0000000800)='./file1\x00', 0x800000000001000, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0200aaaad491e2f8e1c7c2f5d58d224fe1ab565f4c05010fed36febfcf358cf4ee83cb0d8c4f425854964d2cd90608b214743a9e19f0634dbbe43a4a9523ba5ec022aed8b2b8a75b8582a8e2833eb38715788feb24c0c379037b3e5d80039b8739a80fdceb7bdada000000000000000000000000"], 0x1}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000008c0)) 00:53:26 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x101000, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1a, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x4, {0x8, 0x9, "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", 0xeb, 0x2, 0x7, 0x7, 0x800, 0x2, 0x0, 0x1}}}, 0x128) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) syz_open_procfs(r3, &(0x7f0000000180)='net/udp6\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x40000000000, 0x0, 0x0, 0x0, 0x4000000000000f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x9, 0x804, 0x90b8, &(0x7f0000000540)={0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000580)=""/128, &(0x7f0000000600)=0x80) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:26 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240400001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:26 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:26 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:26 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0x4000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/68) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000001970004020001000500"], &(0x7f0000000180)=0xe) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 282.522017] EntryControls=0000d1ff ExitControls=002fefff [ 282.527590] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 282.534693] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 282.541553] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 282.548253] reason=80000021 qualification=0000000000000000 [ 282.555745] IDTVectoring: info=00000000 errcode=00000000 [ 282.561537] TSC Offset = 0xffffff6740a0fdd4 [ 282.565965] EPT pointer = 0x00000001c307601e 00:53:26 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000006c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000001c0)={@hyper}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x42000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xf6, 0x80, 0xf3, 0x4, 0x7fff}, &(0x7f00000009c0)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000a00)={r3, 0x2f56b17a}, &(0x7f0000000a40)=0x8) getpid() sched_setscheduler(0x0, 0x7, &(0x7f0000000880)=0xfffffffffffffffd) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) fstatfs(0xffffffffffffffff, &(0x7f0000000300)=""/158) mknod$loop(&(0x7f0000000800)='./file1\x00', 0x800000000001000, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0200aaaad491e2f8e1c7c2f5d58d224fe1ab565f4c05010fed36febfcf358cf4ee83cb0d8c4f425854964d2cd90608b214743a9e19f0634dbbe43a4a9523ba5ec022aed8b2b8a75b8582a8e2833eb38715788feb24c0c379037b3e5d80039b8739a80fdceb7bdada000000000000000000000000"], 0x1}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000008c0)) 00:53:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400fc001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:27 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0xffffffffffffffff) 00:53:27 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x7) close(r0) 00:53:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240003001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x101000, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000540)={0x200, 0x6}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="533e8f95d7425f971a95bb8648f43e11e06be7b6dc28c1cbcc5f5ef6b2242f0fe4ea160db1a40c306cf770787c797335ac4e8b3e10402c2eda93e689f0081160d976a83eb04b65f0eade180535bcb85c4682ac456dfd10a8f50617fc7781e3e8a12cc699b0812ae5dc3fb2275e3a7ffdd563ab383c41401c0b51d052c2a75d659499f6e20e9519d43111b6b17b81668fdfe6340417cede351a465a23d23bc3ff", 0xa0, 0x20040855, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x6, 0x6, 0xffffffff00000000, 0x1, 0x0, 0x100000000, 0x100, 0x4, 0x3f, 0x10000, 0x4, 0x0, 0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x6, 0xfff, 0x2, 0x100, 0x7, 0x1, 0x8, 0x0, 0x7, 0x2, 0x3, 0x2, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x40, 0x1, 0x8, 0x7, 0xfff, 0x3, 0x9}, r2, 0x6, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = semget$private(0x0, 0x3, 0x20) splice(r0, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x80000000, 0x3) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x40102, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000440)="4d4b9d046d7a670aae8b521712f1b533f95cc6e952f57852b2d83b6f6b89b844d96c72c90cfc4e0ab2c379ae1b2443ac7147bb49324742301ca94c3858c624634d93413b8774330f535804d6690db99fb1c4030b0a40f4e83c50af0615408170873932dc025316edcb4e0d09062a7f52e1be504b4af02977819b") semctl$IPC_RMID(r3, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000004c0)={r5, 0x3, 0x9f0}, 0x8) 00:53:27 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x101000, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1a, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x4, {0x8, 0x9, "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", 0xeb, 0x2, 0x7, 0x7, 0x800, 0x2, 0x0, 0x1}}}, 0x128) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) syz_open_procfs(r3, &(0x7f0000000180)='net/udp6\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x40000000000, 0x0, 0x0, 0x0, 0x4000000000000f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x9, 0x804, 0x90b8, &(0x7f0000000540)={0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000580)=""/128, &(0x7f0000000600)=0x80) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:27 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000180)={0xf5, 0x0, [0x1, 0x80000001, 0x0, 0x8]}) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x1, &(0x7f0000000100)=0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="c7a1"], 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240), 0xc) close(r2) 00:53:27 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) bind$pptp(r2, &(0x7f00000003c0)={0x18, 0x2, {0x0, @local}}, 0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "ac74c58db1c1c72ee0473f797d111b0e"}, 0x11, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x4) write$FUSE_INTERRUPT(r1, &(0x7f0000000400)={0x10, 0x0, 0x7}, 0x10) close(r0) 00:53:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24000f001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:27 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x101000, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1a, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x4, {0x8, 0x9, "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", 0xeb, 0x2, 0x7, 0x7, 0x800, 0x2, 0x0, 0x1}}}, 0x128) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) syz_open_procfs(r3, &(0x7f0000000180)='net/udp6\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x40000000000, 0x0, 0x0, 0x0, 0x4000000000000f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x9, 0x804, 0x90b8, &(0x7f0000000540)={0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000580)=""/128, &(0x7f0000000600)=0x80) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 283.225086] QAT: Invalid ioctl 00:53:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400fe801a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:27 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010006000000000002000200", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r4, @ANYBLOB="040003000000000008000600", @ANYRES32=r5, @ANYBLOB="885d4a7515e0ca", @ANYRES32=r6, @ANYBLOB="10000700000000002000040000000000"], 0x4c, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2, 0xffffffffffff7fff, 0x7fff, 0x1000}, 'syz1\x00', 0xd}) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:27 executing program 4 (fault-call:5 fault-nth:0): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:27 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x101000, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1a, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x4, {0x8, 0x9, "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", 0xeb, 0x2, 0x7, 0x7, 0x800, 0x2, 0x0, 0x1}}}, 0x128) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) syz_open_procfs(r3, &(0x7f0000000180)='net/udp6\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x40000000000, 0x0, 0x0, 0x0, 0x4000000000000f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x9, 0x804, 0x90b8, &(0x7f0000000540)={0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000580)=""/128, &(0x7f0000000600)=0x80) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400d7051a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:27 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x9, [0x1, 0x10000, 0xffffffff, 0x2, 0x80000000, 0x1, 0x5, 0x28000000000000, 0x7]}, 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000000000000950000000000edffffff000000000000"], &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:53:27 executing program 2: accept(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'ip6gre0\x00', 0x4}, 0x18) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) close(r1) 00:53:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400003f1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:28 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:28 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:28 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x101000, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1a, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x4, {0x8, 0x9, "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", 0xeb, 0x2, 0x7, 0x7, 0x800, 0x2, 0x0, 0x1}}}, 0x128) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) syz_open_procfs(r3, &(0x7f0000000180)='net/udp6\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x40000000000, 0x0, 0x0, 0x0, 0x4000000000000f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x9, 0x804, 0x90b8, &(0x7f0000000540)={0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000580)=""/128, &(0x7f0000000600)=0x80) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000fc1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:28 executing program 2: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'bcsh0\x00'}, 0x18) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)={0x3, 0xffff}) bind$bt_hci(r0, &(0x7f0000000240), 0xc) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000040)=""/123) close(r0) 00:53:28 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffa0"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7fffffff, 0x501000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@loopback, @empty, 0x1, 0x3, [@rand_addr=0x3, @multicast2, @rand_addr=0xb5]}, 0x1c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r3, 0x3, 0x1f, 0x8}, &(0x7f00000001c0)=0x10) close(r0) 00:53:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0xfffffffffffffffe, 0x84, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000005c0)=@buf={0x87, &(0x7f00000006c0)="e70396e2f4318fee24a9f03bbccb13ca436459cc51750b99eead02c4990b9b8b11156f982e34b3cbf923344b7d2393417c7e5180cc342897bcf0528a9d97872b0427934a942f6fe2819db2eb7ebad4111a3401457c9382cba379e7eb53e5235e3fdeefa36a671912936268481f902250ec29c9fd4e698222e0dc6308cde778c004bc33d08c54c2"}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280)={0x3e76, {}, {{0x2, 0x4e20}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, 0xe21, 0xc79, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x4, 0xfff, 'queue1\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="66baf80cb845149682ef66bafc0cecc4e179dba6c9400000c4c1a45f0ac4c2b1dfad9c25000067f3673e8bb30000660f38801a8fe920998300200000c4c295990a673e0ff346fa66baf80cb8e45c2c89ef66bafc0cb8e76e47d7ef", 0x5b}], 0x1, 0x0, &(0x7f0000000200), 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000480)={0xf, 0x1f, 0x0, 0x5}, 0xf) 00:53:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240073011a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:28 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) bind$pptp(r2, &(0x7f00000003c0)={0x18, 0x2, {0x0, @local}}, 0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "ac74c58db1c1c72ee0473f797d111b0e"}, 0x11, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x4) write$FUSE_INTERRUPT(r1, &(0x7f0000000400)={0x10, 0x0, 0x7}, 0x10) close(r0) 00:53:28 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0)=0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [{0x100000000, 0x1}, {0x4f, 0x20}], r3}, 0x18, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:28 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5000a16d811401c52db5626d66ce55ce0000b599d30d612cc3275fe0ad1f74a01194288cf3c68db19d"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000031a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:28 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x9, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xe14, 0x1b, 0x1658, 0x2, 0xa62}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:28 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x80000001, 0x4) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) dup2(r2, r4) close(r0) 00:53:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240080fe1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:28 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0xf0, "5daeead821ce962d0112d7db67d6ddf09c78443b6eccc96d23c761b42dbf3e7a6ef2c5c59322f5320e3eacb743d78bda4d07f1fabb6405d7dff47c8b112d8b2c9e21b6890228e46f1798950e1baed816e82102a183a8005c3fb9d7b2590a56ba8b74cd5bc23854b4865b4262e7d40af3046afe396545a20ba2b322cf8b26d35c2e545f512e9c64debefac4e30f3aff266e3d42393afb1bb1640406f091872be4d32006b0b956141fae193a09d1a2d717062116464bbe946b6ace16e51dd6fd65da9b26b089a73e97592cd93b0597af1760b9d3a5583c0371ee57c22e9e806b9ebf0d80e3748f138f86fd72b34c28d131"}, &(0x7f00000001c0)=0x114) recvmsg(r1, &(0x7f0000003a40)={&(0x7f0000000380)=@hci, 0x80, &(0x7f0000003880)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/232, 0xe8}, {&(0x7f0000002740)=""/110, 0x39}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/38, 0x26}, {&(0x7f0000003800)=""/105, 0x69}], 0xa, &(0x7f0000003940)=""/226, 0xe2, 0x3}, 0x10041) getpeername$packet(r0, &(0x7f0000003c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003c80)=0x14) bind$bt_hci(r0, &(0x7f0000003a80)={0x1f, r3, 0x2}, 0x6) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000003ac0)={0x110, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x805}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mq_timedsend(r0, &(0x7f0000003cc0)="afed326321a974f6f0cbfd4be2293e151e68876dd8d19987e92f44ae0217242db66c90e3f71a500aecee119abc4064a218cbaa7a70223558878607740441dc022c7269ea3457e0834311eeedf69c8003a49600bcf39d5ebfdf9b158728111d88c59fad0cf86e8c9a30aba85e93fe26d3ed755f9f15fa63ea15822fa0721afd784ff1b328e355a766d9f9d7b60f193c4b53287de1819e3ad721b5513a2217adff84974897f001599d6bda80f3d07c5a3f038791a2730206c161d213ccdb35dff78e701de6d218007e6e76d249449899ea2a879ff2a59d686c2a74bbb86ffc95df546746d4281bb1dde52974a5913ea6a8577dd2ab0b6751569109fc9f6a6359517eb80e532235ef4155677dd2ebc073e7e2550bff2cb8e87dc96f740d8ad0bdfc4659166964193117f513380e4c9b3af332f0d9cf9afa691a27ac39999d3996153d32ce6d9f49566ce6e0339d07692b6a142bb7fc9eeefe881862b76e17a8143db596727081a76727cfe64f6628dd34688441c65eefebd379a2eddde091bcb14858fd457fa52168944c113d34540d318e5e44961d324ce189122cd690ff8abb33ff6daffde8e00c4eab910432eafb2136f2b6fd02296060065c63309e7c481a8b9a7f22bc8527bb664e4879795bf2379fb0987d2f95fd66c799464ac232326591d1c1e81a55151a2b9702b036c13055d55028104b7707b6957480838d29f6f4a190c53641d57e65ed4eb7e62c086f356c341684aa7e14b93224d777f90360022822fe88e815ff5607ebd46c9b3d7ae6c4145e2ef3f07563d860a3922d906ef7dab60114021d4e9fa67c1ea2be8b1539b90f5c433eaac1133429ee9dbc1b5532da58478fd8a613e5ef5416ad999755bd32a53c034b411b2f50561394517e4c0aead51425bd793ff5bf67b3889920f55fca140377b6a1db7aef1b54854175300f5d00c82fcb7412d0259a0119cd2d808e5fc9ff2aa39b469feceac0182c430783e6d59fc3f570b6fa91b204c2c49ca31c0800fa1e38b7e811d1e87ee8eb94586b879063c060853c6340c070fd59db6f7eb9b94fa369b98fec3be1e93cd34d6f30d96c99bf004dd1a5216ff473530a8336f8282167aa43dc3fc7c06183c261e767c3dd52fd57c37e9228a9f621bc929c4b2cb0c1f12e867d6b817ca68cdb97d25a3a2c5b33570ea2534901d448236b37164f5889ad20696ea531af79be0c22e567b8721db065749a02689ca6c0897c8e3d15306346bc918f91ae5fc923376a5451048bbca66865733324638f22e1edb93f3ddbaee4c0b7e2591c6ca14c25d2b70a9cfde27016fff84761d04ff18caaa19b2489b7c5cdb9739be987516f307542bd44f63b6fac4b026e6fd23a27410a787007279bfeb3e0442f9d7e8fe453804deb7406467ac45a1f7d5ee225b23cf8c6e7cacb2781f3ac67c5756c9701fce496a27d26694c8b49c6de97cde61b27ce6ea52290699be960aed80185a092ef9c250ed1784bdeedd1ff428e1039dbdfb49987175b5a8292542a462c6ef4b953eff82e1cee98dc4643a0a903832cdc4e0ceca7aa623ca6ab5fc438c8c98462721a60d8a7158ecb829ecf5cf4e896a5c77c57529bcef7c82e7a2dcd274013a0c3ea7eb75f14b94c5bbbe8967c82cb6460b250186663baaf97dec94b93c8f6bcb34fe593f63ff0b0010f5788d63b0e5fd83b0c711af940211bd8132d704f6e0b0ce2dd7cf36c18906be19e62f0ff34eb068633746280fa87b0c87a52c483678ca58d1563461c4c5877f2d604975107290449df18ff787efc1b9fd40f99b26767286d0824e793faf2f5057d8c607685642e7c73f66c7c500ce7d2e9b2c857e6135f2f52557bc2545f0c9f5b3f8a0547642e92b82e0fcb978495d5e2d02a0cf92470382020187b1cba07cfb76a079c6c4e94c36db1e86b910195d530db8becc0ff29be3cc61344223cf47c04e6a7bc3cd86df6505901c97d390e5ede971c566c5806afe31b2feecb4e8cad0d55761d61d0326035ab672105e7d2d9276912220fa6fc320c8a45c19612bd3932124c68111928ea6635eb80ec101a70b488384ff91b82bea2c4e337a9a695b5da7bc9170ff8889b20f2ac57b2d521fb724dc2b9226c555ad837001f2762ec24fb9fb654a548795ecd523ff4000d105a4cf270389e2dfbbc547c15e2e995fc14e635dfe8a3f412ca092dad9e58c8ac68a16613b2e6b6da713ab7eca8ecfc57ea405985027f271ed79f597d16c0074051cff9be19ea9be57c7e2d3456455bdfb55340b350bf361d371febec3ffc0f676e952dd69e9d69322b65ead851b81d4b5bb3c7a97108e7ce98645f567de00c9da255056c484e2c74930421d14da76a0a0ea06da756314c0da036fb778a705ea3b6f339c46bd6b5bf2a8e5299fffe4b2b72832aec3ffe5eb3e9dab7ed816841718271fadcd1cb833488c30e4a7a4b6eafe9cca971cff5c197d9113e92db00d820c38201bcddb7d3e20752800665a30e900991eecf8d1e821fa5733e9abbcebe41b56f8e67ac1059985ef2c4922fa5011c68e3222e7f987668082d6e755504046d0f4157854ef4b0d6ef46fc99c62fc4aa4acb9265489eec3c0ee69d38e62f9cc5d23c04dcec8e24b5333be575ca6f38fa1655664ac543efe5c5947ea5b35261fab3c4ecf31ab8e8a3265b067ee732f215e5faf6a45b03cce6a622d166295ea0ef350e7c1f8f85671620eedf22aaddecacf9e2df0bb4ac7dbf2cc214ed68d13d3feddfcb7aa07ba2842ec04e779345772e5b20fbd531b96b782cdc77be2a0194205b4e0e17ad3f281cf0afeefc10be5cbe756919b719a9397985e2c5d7c7b35acd8e81e9ffde28fb707af5412c5e2a8c862d19f91f1eadea3318b2b9a10b4c76e8b773a411df341ab52c30b8ff31cd8cf874c8bcf778c63844fe94de447e40c072d1f01c72289a1a350bcc11a61ffb99ba488b0a6e95467c4cf6e1f2534b9b50bf1c978d4b88b5f3471445e6bc5f491bc1c071f3588235088382867ada75d780934609c69ee8f23fab3942a9608e484e75e1e9a4d5970ecab2ac5308a5d6afde5ab64b0ea88a12de3d205d0f7a5226b68a2f8e937f9eb7a33fb6796bf5e2b11d3e7bf3a0f9f65092f93d59f76a32c3b0f2932e921c39d698d9a419ac8e73a2ade6c388f79a739bec97de16b4c876474df0d423f78020940dc18050056bdc1d5cff147bd56105461dcc7ea6b3127f31be696efb2840312a369ba7766ccb9dbdcd437a67de64f6d46d15c26a4bb9a05678e86be260e3103de7048fe31e3a68723f0e6a6ea48ec3fbfac1070cde5890edf0aa3f7a61eb67e931f446495feda6f81b5d3d4a47e8256828839e76e857f75a2c5a510b671a6a0ad499ba53e0a28a1e8bd0304fd8a069dbcd67764618aa8077f3e876693746375f5b47d8a7b7fe6593b65db7386ef2c948e5b9f9a9eccfd49b59282548b15646774eec23bd96f6a9efeb88c7346b7f0dc36cd67a9bef35651bac3393e13d653ce535588ebbffaabd93be64b77f21acd4227abe34ab9793c066b792e1b92d539d408192b9b07dde27163782fe5143870588ab2daf6072b048c9c955e1f3878a0e83054a8f93941ce4bd71ab483975c8bbd3af645cf6edff1115eb2864753d0f1d624c9af1392875bb3477d43779f90d22395ad8b37ddf2ff8c431b4788426be38fc7580a3cde4a50cebbb7e2b29793f14635aace98776be17337e4976376a6596109c40355818f3a46d42e4cef51c464f85c000ca735311701617ff99ed475166a11fccfb548b97ea40eac4d892db5fe051946613ea4dd7fafe4efee8c2a604384694db9bebfc376b255a76c0b394390b3abe63320a7af63fc4b0abfaba8dedb41647ef5df576650ce5aef23d5a8026587b906e9a371c8df20b099f4e5b55b8bb9ed526113d506e439ec06edeef62b8657b7da2f0c82ad004dda0661191d0e23ea8c761a71a5655626507444981ed7ddaa17c43a486fec6e095af04d9da56af9f54ad537e088461a2befbafb15b0fb0aa0af92bb1a6029ebd09244cf72ef919a230fadb28b9e9bc4c54c445304ee62b0456c9f42757df63d7ca5429795369ab6a4aff01225553137be576f8b0559b613903255eab8012b84a1d55aec62ed92d8436894fe4e9aebb84af25826e3d7b0a4c616327d9daad1b84daea293e3a7e42491245daaf73d7f3cf155c8b4830aacc6c60c932528343f3929780ac8228cdfe44e0d379b612ad0415cb95e1fad25af6c9827dbd35769ff7ddffcd245b74a0b785b3c3691551368120a969c1d7bd4d1e00a058ced0fe0d25099dc7e6b79045a82fb468a16086bed3c0ef66679b7c11dea5ab7f42fd974fbb700e999b2686e72a620ff90afea330bb5a9efa6784fa862ad11912e2fe159c45c75a51dc69deafacf12c9cb3db2f8429b5f48c239d3bb6ffa14d5da93b9a69318515aaa539b7d8f5af09a05887bb73c42148769c63ee1c247f19af5bf70f556429660ddb6ded65b9c3869d1698d3f6cdedc1f18c28bf3bfc66de0e3cccc418a680b5649d0794fbb306c2e106f4bd7fb9063f581552b87a93a6a3bf2f622631ee274d5fd2c2b39640dc08a1ff8b6b76e860d57b4ea19e6e1c8304e09eed09231d1b2cca2ecf4123c198e84e7911c10d8937c7c4a6b737d481091a19d753632931806ea752837ec18564957cf3b9cc36784a641488994bc951e2ee179aacda7cfe98719a6022286ac6f4ec9adc3774fd5ca01e01d7f5a6ad3fa6f37d94421b3023c7643d48c2d9b342c9a64024204f84e0e487c930cbcb9614286ece8c7b06ff8807555b9db56d1df4a769af05c491efcc978c5af3272735b2962b4c44de85815359d04d4f76b99dbb782c6c2d647c71f8222415be377c9e10c3bdb24fbd9b71b3d6120ee9bb21d9de2c61b937f5b68065fb44fb94ecedc00009d0b6085dd42157845b69d269bc63e4dda5a4e285b53aacd39e4510275e14d04401674c809d23c005b683427c7bccf3530c54c4879bc5a8cd40af386c4b4c7023fb102753bedd926422f102e1367a1d944ff5c94a2a57f846dcfaf0822e4b2de62ec7ce76fdc0c810ca1096b0674a0e31b667cdac59df91c92e5295327d1f334972a9d052d66bda5c6e435c4b965e33f3695c93e6799d51cc3025150510f7b4e2217510222d748d7eab6e80c01174c6c990102e123adabf786dbdf61ac74bc2a027acac9c144c5fda3127807a0e5197c290364be80f41dbf15338d14afde46fd58b0e6b4300c1385274017e9de6298f3c60708e7e41c527a86335ab2472217b2b8a0af5d15fe7057ba6ea354cc4e26f09aa293ec4d19842a0faf7ccc185e0e2fe8d009cf2db196313e179b2fe8c17d757e2180020766b1182f643ab02b87732d162492188a042455e31deb6cd68ff5333050204e5d378e4d1bd3844ba5bc920c1537e57f07b197e45a6afbda3186f2736882e5239ede5219d8c19b2351f84ce13125554d7d077fabe945d22d7563eb81c97ebbb916060a2a22014fb942018674e0d40b0f60faa1dc07382a994c7955c495e152edd59a6bef1923408cc896357b4e02bbc098f38723112cddf1f858e40af3a04e4209970ed7edb081d27284ef88a40247967183208402f9cfaaafe3fad1615b02ebac7e1a5c01ca4cd4a34fb52fe0becec947dcacc7c0400ea194166c9e5da8fcf86c02b7f91d599115c8177799b56ef07c44524f213ed4a6e855f41590e6aba641863d33c8729a0b12f9c9cdb950931d59b912a422390dfffcddb96a4938b993fd708053d8a59c6caa48d680823ea0d60d9062afd", 0x1000, 0xfffffffffffffff8, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/35) close(r0) 00:53:28 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:28 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0)=0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [{0x100000000, 0x1}, {0x4f, 0x20}], r3}, 0x18, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:28 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x80000001, 0x4) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) dup2(r2, r4) close(r0) 00:53:28 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) 00:53:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240001731a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x80000001, 0x4) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) dup2(r2, r4) close(r0) 00:53:29 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="002874290b4c64247408c6226300"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:29 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0xa, 0x1, 0x6d8d323a, 0xffffffffffffa168, '\x00', 0x6}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) 00:53:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000ff1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000600)='[\'posix_acl_access\x00', 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000009000000e61effff00000000000020000000000003000000000000000700000000000000060000000000000005000000000000000600000000000000b5ffffffffffffff01000000000000004d000099fe366a00000000b632edbdcbecbfa97959522a9d74d67a594bd62ecf15f3d171ad15610e2e682ef6cc2deb35daa569b28c01f84d8bcd02176a2db4f658873a2700000000000000000000000000000000000000000000000000000000"]) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x2, 0x6, 0x7) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r1, &(0x7f0000000180)=@random={'trusted.', 'bdev!\x00'}, &(0x7f00000001c0)='selinuxnodev\x00', 0xd, 0x2) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x3f00, &(0x7f0000000100)=@abs, 0xa) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) 00:53:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400f0001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:29 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) close(r0) 00:53:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x221) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x60c040, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0xd, 0x81, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x7ff, 0x7fffffff}, {0x0, 0x0, 0x65, 0x3, 0x299c}, {0x0, 0xfffffffffffffff8, 0x1, 0x5}]}) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0228ea17350000000000000000100000"], 0x10}}, 0x0) 00:53:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240002001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:29 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x52082) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x4f, "a297cb1a9d222b72bb0ed969a1fefc81e4ba032c02ed46f1853669ee4215afa50fcc438f5fe16e5506191aa13fa5b441f475a8c555c09fe2b9d77d3c6ea6a47a2e4b09f0490e6146e2466993ab17e4"}, &(0x7f0000000100)=0x57) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000f01a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:29 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:29 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4$alg(r0, 0x0, 0x0, 0x0) close(r0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x3ff, 0x4) fcntl$addseals(r2, 0x409, 0x0) 00:53:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400fc001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000600)='[\'posix_acl_access\x00', 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000009000000e61effff00000000000020000000000003000000000000000700000000000000060000000000000005000000000000000600000000000000b5ffffffffffffff01000000000000004d000099fe366a00000000b632edbdcbecbfa97959522a9d74d67a594bd62ecf15f3d171ad15610e2e682ef6cc2deb35daa569b28c01f84d8bcd02176a2db4f658873a2700000000000000000000000000000000000000000000000000000000"]) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x2, 0x6, 0x7) sendfile(r0, r2, &(0x7f00000000c0), 0x20020102000007) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r1, &(0x7f0000000180)=@random={'trusted.', 'bdev!\x00'}, &(0x7f00000001c0)='selinuxnodev\x00', 0xd, 0x2) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xfffffffffffffda1, 0x3f00, &(0x7f0000000100)=@abs, 0xa) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) 00:53:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240005d71a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:30 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000200)={0x7, 0x2, {0x57, 0x80000000, 0x7, {0xe45, 0x9}, {0x0, 0x6}, @period={0x5e, 0x0, 0x2, 0x2, 0x100, {0xffffffffffffffe1, 0x1, 0x7, 0x2}, 0x6, &(0x7f0000000140)=[0x10001, 0x1ff, 0x2, 0x107, 0x4, 0x9]}}, {0x51, 0x2, 0x5, {0x2, 0x865}, {0x9, 0x74}, @cond=[{0x7fff, 0x3f, 0x3, 0x1, 0x50, 0x3}, {0xfff, 0x8, 0xffff, 0x3, 0x5, 0x5a39b02f}]}}) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:30 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 00:53:30 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f812590e4d679e728bac1d19f3d339fd0a767077b3536369241586319acf384218606c0db2840d90ea7415c2b2fa93184dd8c53142"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r1) 00:53:30 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x23fffffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:53:30 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4040, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000080)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x33, r2, r3}, {0x6e, 0x8000, 0x4, 0x6, 0x9, 0x6, 0xc1a, 0x9}, {0x0, 0x100000000, 0x6, 0x2}, 0xfffffffffffffff9, 0x6e6bb7, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x3503, 0x3, 0x1, 0x8, 0x0, 0x12, 0x8}}, 0xe8) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240060001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:30 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) close(r0) 00:53:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400000f1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:30 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400800, 0x0) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 00:53:30 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r0, 0x1000, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80800) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000240)=0xfffffffffffffff8, &(0x7f0000000280)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000580)=0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = semget$private(0x0, 0x3, 0x20) umount2(&(0x7f0000000000)='./file0\x00', 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000001300), 0x1000, &(0x7f0000001440)=ANY=[]) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', &(0x7f0000001380)='./bus\x00', 0x0, 0x1, &(0x7f0000001780)=[{&(0x7f0000001580), 0x0, 0x1c15}], 0x0, &(0x7f0000001800)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x0, 0x2) 00:53:31 executing program 0: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000200)={0x7, 0x2, {0x57, 0x80000000, 0x7, {0xe45, 0x9}, {0x0, 0x6}, @period={0x5e, 0x0, 0x2, 0x2, 0x100, {0xffffffffffffffe1, 0x1, 0x7, 0x2}, 0x6, &(0x7f0000000140)=[0x10001, 0x1ff, 0x2, 0x107, 0x4, 0x9]}}, {0x51, 0x2, 0x5, {0x2, 0x865}, {0x9, 0x74}, @cond=[{0x7fff, 0x3f, 0x3, 0x1, 0x50, 0x3}, {0xfff, 0x8, 0xffff, 0x3, 0x5, 0x5a39b02f}]}}) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:31 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000601a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 00:53:31 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="3b7826c18a1af65f1a9464aadc3de8b42006084d2c8d91310ba3dfd9c02b5cac4a1c8aa4bc5cb6d5e3775444b9a2045f4ae5788da18b113d6d7a599cdbadfc62a23b5e44a44dd20c4616a7cd6092a83353d7"], 0x2) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'erspan0\x00', 0x5}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) close(r1) 00:53:31 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) setsockopt(r0, 0x8cd9, 0x6, &(0x7f00000003c0)="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", 0x1000) ioctl$UI_DEV_CREATE(r0, 0x5501) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="ff804718109d015ae476394325232ce560edbd2966691c51cfb2b602c954776dd78768564bd5e9de1e6ba73cc4c131b9b3dd2d1ab5f8dfbef5aed31dcc5315bb77361095347fa5777039b8f74f18754784f80962c73ff591d77e727cb6c41cd3a03c48f15ce7baccd300eba3ecbc55cbf2664d1a4cf86fe0d11c9937d3203b032838a29e0c021a54cf25decd9d6ae5064ddac4e4ea2f70c677f3b3e6b30fb64157f60b1dcb43d7f7662aafe1c3e4b85c9aa7108aaa5d5658f42ab3fb4e106e"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 00:53:31 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x4000, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 00:53:31 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r0, 0x1000, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80800) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000240)=0xfffffffffffffff8, &(0x7f0000000280)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000580)=0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = semget$private(0x0, 0x3, 0x20) umount2(&(0x7f0000000000)='./file0\x00', 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000001300), 0x1000, &(0x7f0000001440)=ANY=[]) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', &(0x7f0000001380)='./bus\x00', 0x0, 0x1, &(0x7f0000001780)=[{&(0x7f0000001580), 0x0, 0x1c15}], 0x0, &(0x7f0000001800)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x0, 0x2) 03:33:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000b2abd7000fbd3df250400000008000500000002002400020008000600050000000800070001000000080002004e2000000800030007000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) close(r0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x0, 0x4c0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x7af}, &(0x7f0000000300)=0x8) 03:33:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400fec01a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:20 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x115, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$packet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4e84aaa3c292"}, 0x14) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000280)={0x7004, 0x104000}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001bc0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002980)=ANY=[], &(0x7f0000002b00)) r1 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(r1, &(0x7f0000000200), 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000000600)=@nl=@proc, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000001680)=""/198, 0xc6}], 0x10000000000002c7, 0x0, 0x0, 0xffffffffffffc1fb}, 0x5}, {{&(0x7f00000017c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/194, 0xc2}], 0x1, &(0x7f0000001980)=""/232, 0xe8, 0x5}, 0x7}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/157, 0x9d}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000001c00)=""/101, 0x65}], 0x3, &(0x7f0000001cc0)=""/130, 0x82, 0x7}, 0x8}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/206, 0xce}], 0x1, &(0x7f0000001f40)=""/34, 0x22, 0xffffffff}, 0x2}, {{&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002000)=""/240, 0xf0}, {&(0x7f0000002100)=""/79, 0x4f}], 0x2, 0x0, 0x0, 0x10001}, 0xff}, {{&(0x7f00000021c0)=@nl=@proc, 0x80, &(0x7f0000002580)=[{&(0x7f0000002240)=""/131, 0x83}, {&(0x7f0000002300)=""/55, 0x37}, {&(0x7f0000002340)=""/226, 0xe2}, {&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/98, 0x62}], 0x5, &(0x7f0000002600)=""/70, 0x46, 0x7f}, 0xdcf}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002680)=""/50, 0x32}], 0x1, &(0x7f0000002700)=""/31, 0x1f, 0xabf}, 0x81}], 0x7, 0x2000, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'U-', 0x3}, 0x28, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002940)='/dev/qat_adf_ctl\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000002a00)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x401}, 0x4, 0x6}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000440)) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000340)={0xd7, 0x5}) dup2(r6, r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)}, 0x10) lseek(r0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r5, 0x81}, 0x8) shmctl$SHM_UNLOCK(0x0, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002a80)=ANY=[@ANYBLOB="03000200000005007bd49fffe9e61718c37cb00be9b3565ab9d955bdfeba156dab360a95492a6af618a10434c4ff030000000000004d83574949014ea7bffdbab36b81aff045ccb5c2e929705e5551a07d683a5dbcc1465aaa7d4493c5179897867f5ce915f4e38f586a051445260656b83785a940e9"], &(0x7f0000000540)=0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 03:33:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x13, "a62888b827396ed8cdd8e40513b5fc9d727233"}, &(0x7f0000000080)=0x1b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x200, 0x8002, 0x21ab, 0x3ff, r3}, 0x10) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xf5, @empty, 0x3}, 0x1c) 03:33:20 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4000000000}}, {{@in=@broadcast, 0x4d3}, 0x0, @in=@broadcast, 0x34ff, 0x7, 0x0, 0x846}}, 0xe8) r2 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r2, r3, 0x7, r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r6 = dup2(r5, r1) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) statfs(&(0x7f0000000500)='./file1\x00', &(0x7f0000000c00)=""/4096) recvmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) 03:33:20 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000140)={0x5, 0x2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000003c0)={{0x3, 0x5, 0x27f697be, 0x1ff, 0x5, 0x7}, 0x9, 0x7, 0x5, 0x9, 0xb37, "ced5dbb7599ed5ee76a28b388e30890cff88fc7d0608da3ac7209fd70e0ac3ad6cd4df182b1eae320844cd4d3707846d912224e9d33f76878c9fe11d159f875fb72fe2e8f92e975198f47b49c5d80b2908e981fe725ec7d5d2a4bfdb627cfbd967a1ff3acf37c502cc45629f719c64cc5e1f61795a70b7c6c8d431a51d04c4e5"}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240004001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) getpeername$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, r1}, 0xc) close(r0) 03:33:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400c0fe1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:20 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4000000000}}, {{@in=@broadcast, 0x4d3}, 0x0, @in=@broadcast, 0x34ff, 0x7, 0x0, 0x846}}, 0xe8) r2 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r2, r3, 0x7, r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r6 = dup2(r5, r1) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) statfs(&(0x7f0000000500)='./file1\x00', &(0x7f0000000c00)=""/4096) recvmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) [ 287.464628] QAT: Invalid ioctl 03:33:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RREAD(r0, &(0x7f0000000140)={0xba, 0x75, 0x1, {0xaf, "ae8b3b6ab393c03da554773723f00162abdcc811b0e1534945b734a550416855c1e554ab888c932c6c990f67f8131ceafffa7f987d72b7d3c7f988b95a5a95832e8d4547a8fee38f5c86f600ed8b877b5654457935eb7b7e0ce573ed14ffb33684668cc33e4df24cb1367ca8c128f38041a6b82b22a7d11067369d56b3b648487ed9bb5867e574aed00fc19161f1759311f19e7a788554c05352e2b64ff72e7edd676b670f66d58cadab5ec0d0b541"}}, 0xba) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="ff806d82c48a2ac812e6c36fe0a30d2e1cc004986fb1e251409260aad8591f803b92db4b5c12eefffb4b8c728d6f5888e2f466391f76bd77503ae32647aeb3353c318f5913e5f4f0821a91e2a15360ca548bedee32145ce8d57b3934d244f2d3bb3112260fdf61e8415b84f70930711e95698a1b11fc27e5137fa7981bf15467058fcc2613781fa370873d211df1f79d11c7053ee38dd80bc7873a5300798705ad68f5871dd55d2a638fb0259965fdcf4df9d1dc2cd153b96da8cc0787c54179ffb0c6901f7489209d1229662cd8d455842d4cb4a526e55d9f61790d41af7fd27d20345c79e550573264ecf42fe6e0b68153b8173dfb966b1b7e274edd1a166cffa2193bd2095b4968b9737840cd7b895a25f1e2878b4cab4795f5a02c38cdcd98b67179db4a1c6dcd230004000000000000c5ec82d2289761da9b3f0000000000000036e664fdcbae70176525f3cd16e8"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x10000, 0x9, 0x91c}) bind$bt_hci(r1, &(0x7f0000000240), 0xc) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r2}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) r3 = geteuid() syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x200, 0x5, &(0x7f0000000680)=[{&(0x7f0000000480)="0994d67bbb255868ec0541d72494acd9fc4a6f002ddf12ab35dea456f4edc2a55cbebbda07b997cfcbc337613a7b8761682d1fe9c29ee19f9852880ef9717798690bde211488babb2af9f13cd8404ee7a6c4e6aaf271d2e27c919b0c3ac4878a64cefea2e91012739e3beefaf4f4e4eb80566c219bc2111b1e526f851ee35d007d069af37d037429a2a3987b2ca4a54b70bd61f88413b08415b282957ed4caadb0b0", 0xa2, 0x3}, {&(0x7f00000002c0)="19183117e1bbef0aff80bdd00dc052bb082d769423593046150b8e88bc771e774ece0a810c07f8089cad968ff7eba91be6e9e3f5c1", 0x35, 0x20}, {&(0x7f0000000540)="ab254d87b553b15edc7fd169ac3c2c3373407210224c00a3d183a05ee97743bf1f96c300", 0x24, 0x2}, {&(0x7f0000000580)="3f1e11b1c584a1bad3d98e950d872319b73d2304deaa15a63ca858bad9457784561cb5a3eb72df8ee6308011b26ec665f9ce59d90406936568711b425c8b3452eab81d6b85c101b691145b41e51175b28a8c9d27e93a", 0x56, 0x4}, {&(0x7f0000000600)="10090d465e26d3e7e627e5e487e002fd48b6dd2b1cd026fd7bceb113ad2a735a94236e08fd9e59cb86d984f7e1c0e3d84a9bb225b7ba6a685c0ca245ae0117e432a6c3cd1ed0fa443a35a7d0ebf81169744a659504ec5d5308fab9ecbdd21a195a1dd19c86e5dc02f05363ca4c", 0x6d, 0xfffffffffffffeff}], 0x80000, &(0x7f0000000700)={[{@fat=@check_relaxed='check=relaxed'}, {@nodots='nodots'}, {@fat=@nocase='nocase'}, {@fat=@uid={'uid', 0x3d, r3}}], [{@pcr={'pcr'}}, {@fsname={'fsname', 0x3d, '/dev/vhci\x00'}}, {@pcr={'pcr', 0x3d, 0xe}}, {@permit_directio='permit_directio'}, {@permit_directio='permit_directio'}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x76, 0x38, 0x76, 0x65, 0x62, 0x7f], 0x2d, [0x33, 0x61, 0x36, 0x67], 0x2d, [0x3f, 0x75, 0x30, 0x65], 0x2d, [0x7f, 0x0, 0x32, 0x77], 0x2d, [0x75, 0x37, 0x61, 0x37, 0x64, 0x77, 0x7f, 0x77]}}}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x200, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000080)={'gretap0\x00', @ifru_settings={0xffffffffffff43c5, 0x1000, @te1=&(0x7f0000000040)={0x0, 0xffffffff, 0x98, 0x1}}}) write$P9_RSTAT(r0, &(0x7f0000000140)={0x4e, 0x7d, 0x1, {0x0, 0x47, 0x8, 0x1, {0x20, 0x80000004000004, 0x7}, 0x200000, 0x2, 0x6, 0x4, 0xa, '/dev/vhci\x00', 0x0, "", 0x0, "", 0xa, '-/[.wlan0\''}}, 0x4e) close(r0) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) [ 287.661956] QAT: Invalid ioctl 03:33:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000601a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:20 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c4c0d09a29b8983169914d8df86417a802b772bb638f72ccdcbb46267b5751816c77b6739f484292d5ca5e1bc4efee06f4e07e6a795faee2af27a8f212", 0x115, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$packet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4e84aaa3c292"}, 0x14) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000280)={0x7004, 0x104000}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001bc0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002980)=ANY=[], &(0x7f0000002b00)) r1 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(r1, &(0x7f0000000200), 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000000600)=@nl=@proc, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000001680)=""/198, 0xc6}], 0x10000000000002c7, 0x0, 0x0, 0xffffffffffffc1fb}, 0x5}, {{&(0x7f00000017c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/194, 0xc2}], 0x1, &(0x7f0000001980)=""/232, 0xe8, 0x5}, 0x7}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/157, 0x9d}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000001c00)=""/101, 0x65}], 0x3, &(0x7f0000001cc0)=""/130, 0x82, 0x7}, 0x8}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/206, 0xce}], 0x1, &(0x7f0000001f40)=""/34, 0x22, 0xffffffff}, 0x2}, {{&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002000)=""/240, 0xf0}, {&(0x7f0000002100)=""/79, 0x4f}], 0x2, 0x0, 0x0, 0x10001}, 0xff}, {{&(0x7f00000021c0)=@nl=@proc, 0x80, &(0x7f0000002580)=[{&(0x7f0000002240)=""/131, 0x83}, {&(0x7f0000002300)=""/55, 0x37}, {&(0x7f0000002340)=""/226, 0xe2}, {&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/98, 0x62}], 0x5, &(0x7f0000002600)=""/70, 0x46, 0x7f}, 0xdcf}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002680)=""/50, 0x32}], 0x1, &(0x7f0000002700)=""/31, 0x1f, 0xabf}, 0x81}], 0x7, 0x2000, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'U-', 0x3}, 0x28, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002940)='/dev/qat_adf_ctl\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000002a00)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x401}, 0x4, 0x6}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000440)) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000340)={0xd7, 0x5}) dup2(r6, r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)}, 0x10) lseek(r0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r5, 0x81}, 0x8) shmctl$SHM_UNLOCK(0x0, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002a80)=ANY=[@ANYBLOB="03000200000005007bd49fffe9e61718c37cb00be9b3565ab9d955bdfeba156dab360a95492a6af618a10434c4ff030000000000004d83574949014ea7bffdbab36b81aff045ccb5c2e929705e5551a07d683a5dbcc1465aaa7d4493c5179897867f5ce915f4e38f586a051445260656b83785a940e9"], &(0x7f0000000540)=0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 03:33:20 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x13, "a62888b827396ed8cdd8e40513b5fc9d727233"}, &(0x7f0000000080)=0x1b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x200, 0x8002, 0x21ab, 0x3ff, r3}, 0x10) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xf5, @empty, 0x3}, 0x1c) 03:33:20 executing program 2: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, r0}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(0xffffffffffffffff) 03:33:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24000000670001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:20 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x2, 0x200000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a00)={0x0}, &(0x7f0000000a40)=0xc) r5 = getuid() lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002080)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f0000002040)='/dev/rfkill\x00', 0xffffffffffffffff}, 0x30) getresuid(&(0x7f00000020c0), &(0x7f0000002100), &(0x7f0000002140)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002200)=0x0) r11 = getuid() fstat(r2, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002780)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000027c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000028c0)=0xe8) fstat(r2, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000002980)={0xffffffffffffffff}, 0x800) sendmmsg$unix(r1, &(0x7f0000002a80)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000003c0)="878c088b09282576f43655cf882589c47770593189b9bbcc9cc25ef225746c63e6cc3c390b4385b48a64c7721b966df4ca84df5529751edbafc2da20cc39a8b3500ea44fe4279f57698ee3f7770300400ad2131326db5af438a3a9ea44b5571700b028a5e9f18352422731db5b762a584274e1d13638e73d3ac506a020c1fc4c1a5fb065844b2959431d7b3ba19a03a95fb8713c3136ed21ebe8218695a796a7bf4b9652f9e3dbbd5201d84d3ceeb9cb", 0xb0}, {&(0x7f0000000180)="7b403a1c3cb3a20b90a4ab8226ad1e7f69ae11e469c073791d", 0x19}, {&(0x7f0000000480)="612bbbcf3a145b22914cf0e81b7cbf4a731fed1ff0b16ee0211229a143dec5df923a55340f317877e64ac7c9b7abc0a7e14f5c2b07d64032107410e6efb69989949d0eef552867d4c482290b51ea28f3c90ba1f7208663500c4b1735c515b145a4e9b3d85ceef02fede0eac21a36b3b0d4fcbc2570c71a2f558dcd0925ecbd9d4104ac1658d657d10a5b", 0x8a}, {&(0x7f0000000540)="b24dd615e23466109a959e900c7f7464df2f627ee6a30d6731d95424c37f57beec0211eeae0a2710e79f1ad55c2e2bf3e055edca22f6170a045a399ffcce560a6c2ba703325b3577440c71b4418ac02f915854027c9f64c170a816e301204e0f54c05b4bed498dedbbb6c1a8db95c0212f2b0a39568f06789745627d5d3cbc3ff664c3924bacba4199db31f5360ccb4a987798b1141f27ef287671ad6674c913e043923db29b", 0xa6}, {&(0x7f0000000600)="e93f40bb7b6de6bc70a626e4f41f5f18d9361d8ae73e9fb0a8c0570d870ca353929c906e0515e3609a5fb274328ea0dd59c1c2eba85aaa38dfa07db2624ba3f92156f92c4e6905a30560f5db51e9a239bf555e960a7f5aa87a6d25cd0d382080fbcdc640b1497dcc3b124d863b65f0ca56623b526b729ad84b93494b22dc19", 0x7f}, {&(0x7f0000000700)="de888bf2735559f6db728d5f5086057bc998374ef82c88093ed9c645fb31a3b1a32de0c6ce0d6d6cb1d5456f5b539e01a957eb7404e5e96f55b3a4444eb3f4fa580b32fbaa857e199ebfcf1bc425a2f4fb6ee235e0e32c77259907f58bc4c09ea69ad9785ed9f90e234abce9ec7886fc1cdd579360f22e1f58fcab7121d30334c4af3fc10501990fb7e2cb170f", 0x8d}, {&(0x7f0000000680)="f2e3c70c11923f965445645dcd71fc42f7900405973a3a09eb13ddc220fe7624e881572092", 0x25}, {&(0x7f00000007c0)="7f9f9423400fbe7ad4eb8dec3970", 0xe}, {&(0x7f0000000800)="d2e7727c1c7108a0c0f50515c64be6b0510659c0e26bcfc96e7df936f3320f0b33bc62618755c050f04c0233a6c0041dee7e5beb541a62ad538730874b1def7dfd237fcb0adaa56ec94aa62826052df29898fd266bb55a0897a25c3bb5caca0eeaf01f1b5303ae0d1c2286791be3834ee53c5609f1f22e0d29cb4f5334486756f9c10c76270818bed762f1e7ac976cc7a8e6df0263407850299ad51636d1f6991bb011f9e5fe609b75f1e3e48a80fc407f7f332ef8ea3a3ea79d8724b947309bf7606de1c9e9e635e4fe4e15c55ce4fd0070b9d2c68b440187a3", 0xda}, {&(0x7f0000000900)="9d78ede44bdcf413d47aa0344d43fbfcfdcc5498cd1e5cfc306c5bf54ca2b90a3a5b229ec7844bb6816ce048b5a0cc7c02552376a176f1655bb2c41c", 0x3c}], 0xa, &(0x7f0000000b40)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x20, 0x40000}, {&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000c00)="79ed61d3d1bc324f492e87fa0944813b36e5c014f11316fc05b523f0971c2310a01721c9eebe66a053b42e3109894a2c2060532e81789b65279fc892b279d5dab72db4e6a149c9d64641a373df5407376507df0a10887893029f400fcf6060ac429c97a18d7b3bbff152f631d286eedb87ccfa9392291ba26d0e289ce3403cae20d5c441f168e0a8d494dffaa4cc1b34df75ba87b3e3bd84cc67b3c211f4d9d7a1b5b27a1579acab1cf40a21171081b997e2f84d49b288ad94e7299258ce0fe8574eeb451b20", 0xc6}, {&(0x7f0000000d00)="668cb938ef8db1408d8b4e958b293e6e011cc1b62f013ed86edd101a5eb64557e4e89f9dfa55605e2d180c67867698d20ddc84120d72bd2ef7beeac8dc41e7a27fd8c76d8951c5e3ebf60294c6c247159415374c109d421da2b58a826e0d4df037c52f23547f8498f6d771ba3bc0994613b94b2088e536813bc3018209a923b1458e458fd6f9a1e591d222b0ebeff2fc4b6e950b78522ea21b61e7a1b2e5b348cc", 0xa1}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="5ff7594a16b6081f9a14943531678bd9a164b559b3eac0ca7880e12032f41a78a1b8ed68f7a40dabf816e153fb3801e09e163bf13927cf82c70006e8adf022625949faf0d3e64686e4c0f09c98920f00313b6c94596895b0a8c97c56a08f271bda4a6bb80f6ffe8b36387095bce6f9cc8a58ca9b6f2be0b1f6fcc27a5dc7fea336bdddf6d50484eff3", 0x89}, {&(0x7f0000001e80)="b884aad6af950ea5aa3f53de36a50c423cd451591961a1ad8dfe6cbe392a8769b481487e2c353512c21288a548e3acf142c667d96111a68a", 0x38}], 0x5, 0x0, 0x0, 0x810}, {&(0x7f0000001f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001fc0)="c5decdf1159ce674ebe85706751324c2cea4", 0x12}], 0x1, &(0x7f00000022c0)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r2, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r0, r0, r3]}], 0x80, 0x4000000}, {&(0x7f0000002340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002700)=[{&(0x7f00000023c0)="d93875de2d71728d40122772ac463c6616de1a25d49ac7feb42a01258f50b4404baeb5444f8b8d2385cc1ae529a4aad3a61805dd987addc02e978f1af5892699102aa82d85fbf6858c95b252aec70b696d9139d55bc54184fddb5b048f2f20d5bab80c400b816cef1ddf77418508187f592d3d24dc11916098ea6c4be4d83ab1f69fe9a9498d70fbbb25cae73781f67ecf6866f0cfaa300db481af1d9406b369f6cbb60994daa64c66ef7ffc09d681de06082863c704311c11abd4bcef8a216c700be6e826e99b5466c044999358a8", 0xcf}, {&(0x7f00000024c0)="168d064d8c4dd8b6cfec9fee9d9e5c077672681cdcc463bf82265fffedcf718a5397423cec608e263c9d862b4a18a17b439a18d3a392e0a5b98ee0b541", 0x3d}, {&(0x7f0000002500)="2d9056cf295ff637b7351e", 0xb}, {&(0x7f0000002540)="b911161c0673b003efee52d1a75751bb29f99ed8a7a9d4881358b3616b0e", 0x1e}, {&(0x7f0000002580)="3eaa15ddcab64954870024cb9e52a3f0b1b9d0495f45613e9c04b1dee5007bfe2a7733a2e61d0b1f6d063bb6852be34f17800ae3413e4ae6f3e4fb30780d48b811b1e7fb8ba7a006422abf2a1b7d47f332733b0262ef11a8492337a570ab7de783e9ae6ffbe0651f769438c3dcea605a", 0x70}, {&(0x7f0000002600)="e2f5eb4dd7ab2352fb95a1f357b071a086d5231560573b898e2f9de64a3d", 0x1e}, {&(0x7f0000002640)="0c5e873dbec6baacb71a76b462650735b3228c19c0b71a958051cb5d0adda511055fee0fd6eb079dbe0ea8332e1e199c14415c1f27154e9d5ac9e7e7e113a7fa5ace26d10bbab9c54ed07a71adacaf70c5a089786bef6e1b88ffe4317bfcc533973929dba0165fae74d165009db27cccaeeee30ea8c04496ef7bae767f7ddc53bb51a81823", 0x85}], 0x7, &(0x7f00000029c0)=[@cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x28, 0x1, 0x1, [r1, r2, r3, r1, r2, r0]}, @rights={0x30, 0x1, 0x1, [r2, r0, r1, r16, r3, r3, r2, r1]}, @rights={0x38, 0x1, 0x1, [r1, r0, r3, r0, r2, r3, r1, r0, r2, r3]}], 0xb0, 0x20040000}], 0x4, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000300)=""/68) r17 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r17, 0x40087602, &(0x7f0000000080)=0x7) close(r1) 03:33:20 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4000000000}}, {{@in=@broadcast, 0x4d3}, 0x0, @in=@broadcast, 0x34ff, 0x7, 0x0, 0x846}}, 0xe8) r2 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r2, r3, 0x7, r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r6 = dup2(r5, r1) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) statfs(&(0x7f0000000500)='./file1\x00', &(0x7f0000000c00)=""/4096) recvmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) 03:33:20 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100) ioctl$TCSBRK(r2, 0x5409, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'veth0_to_bridge\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x80240) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0xfffffffffffffd87) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) mlockall(0xfc) unshare(0x40000000) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000580)=""/190) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x10000, 0x1, 0x1, 0x101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 288.024451] QAT: Invalid ioctl 03:33:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:21 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4000000000}}, {{@in=@broadcast, 0x4d3}, 0x0, @in=@broadcast, 0x34ff, 0x7, 0x0, 0x846}}, 0xe8) r2 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r2, r3, 0x7, r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r6 = dup2(r5, r1) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) statfs(&(0x7f0000000500)='./file1\x00', &(0x7f0000000c00)=""/4096) recvmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) [ 288.128322] IPVS: ftp: loaded support on port[0] = 21 03:33:21 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x115, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$packet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4e84aaa3c292"}, 0x14) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000280)={0x7004, 0x104000}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001bc0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002980)=ANY=[], &(0x7f0000002b00)) r1 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(r1, &(0x7f0000000200), 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000000600)=@nl=@proc, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000001680)=""/198, 0xc6}], 0x10000000000002c7, 0x0, 0x0, 0xffffffffffffc1fb}, 0x5}, {{&(0x7f00000017c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/194, 0xc2}], 0x1, &(0x7f0000001980)=""/232, 0xe8, 0x5}, 0x7}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/157, 0x9d}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000001c00)=""/101, 0x65}], 0x3, &(0x7f0000001cc0)=""/130, 0x82, 0x7}, 0x8}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/206, 0xce}], 0x1, &(0x7f0000001f40)=""/34, 0x22, 0xffffffff}, 0x2}, {{&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002000)=""/240, 0xf0}, {&(0x7f0000002100)=""/79, 0x4f}], 0x2, 0x0, 0x0, 0x10001}, 0xff}, {{&(0x7f00000021c0)=@nl=@proc, 0x80, &(0x7f0000002580)=[{&(0x7f0000002240)=""/131, 0x83}, {&(0x7f0000002300)=""/55, 0x37}, {&(0x7f0000002340)=""/226, 0xe2}, {&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/98, 0x62}], 0x5, &(0x7f0000002600)=""/70, 0x46, 0x7f}, 0xdcf}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002680)=""/50, 0x32}], 0x1, &(0x7f0000002700)=""/31, 0x1f, 0xabf}, 0x81}], 0x7, 0x2000, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'U-', 0x3}, 0x28, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002940)='/dev/qat_adf_ctl\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000002a00)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x401}, 0x4, 0x6}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000440)) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000340)={0xd7, 0x5}) dup2(r6, r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)}, 0x10) lseek(r0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r5, 0x81}, 0x8) shmctl$SHM_UNLOCK(0x0, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002a80)=ANY=[@ANYBLOB="03000200000005007bd49fffe9e61718c37cb00be9b3565ab9d955bdfeba156dab360a95492a6af618a10434c4ff030000000000004d83574949014ea7bffdbab36b81aff045ccb5c2e929705e5551a07d683a5dbcc1465aaa7d4493c5179897867f5ce915f4e38f586a051445260656b83785a940e9"], &(0x7f0000000540)=0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 03:33:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000000f0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:21 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4000000000}}, {{@in=@broadcast, 0x4d3}, 0x0, @in=@broadcast, 0x34ff, 0x7, 0x0, 0x846}}, 0xe8) r2 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r2, r3, 0x7, r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r6 = dup2(r5, r1) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) statfs(&(0x7f0000000500)='./file1\x00', &(0x7f0000000c00)=""/4096) recvmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) 03:33:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000021a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000280)=""/154) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x3, r0}) close(r0) [ 288.489501] QAT: Invalid ioctl [ 288.500209] IPVS: ftp: loaded support on port[0] = 21 03:33:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000fc1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:21 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xff, 0x410000) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x8}, 0xacb}}, 0x18) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read(r2, &(0x7f0000000100)=""/208, 0xd0) bind$bt_hci(r2, &(0x7f0000000240), 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001480)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000014c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001500)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000001600)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002d00)={0x0, r0, 0x0, 0xb, &(0x7f0000002cc0)='/dev/adsp#\x00', 0xffffffffffffffff}, 0x30) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000003080)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000030c0)={0x6f, r7}) r8 = geteuid() lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002e40)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000002e00)='/dev/vhci\x00', 0xffffffffffffffff}, 0x30) getresuid(&(0x7f0000002e80), &(0x7f0000002ec0)=0x0, &(0x7f0000002f00)) getresgid(&(0x7f0000002f40), &(0x7f0000002f80), &(0x7f0000002fc0)=0x0) sendmsg$netlink(r1, &(0x7f0000003040)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, &(0x7f0000002c80)=[{&(0x7f0000000440)={0x102c, 0x1c, 0x72a, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0x6d, @ipv6}, @generic="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", @typed={0x8, 0x41, @fd=r2}]}, 0x102c}, {&(0x7f0000001640)={0x1308, 0x1a, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x7b, @fd=r1}, @generic="65cd1216903eb6332ec24ef15bfaf691535d9dc38b6877d03b9b9544e5295106bdb0cfcc6469f0ed715b5d0b33ada13f0aba17121c002da6ffe296ce66dd59ca44861241c34efa817c81fd38075d4762c9b8e7fc33e38d223c650180f87d00f1d8dceebb28690ef7f349e3fbed87eeeb41328570", @nested={0x20, 0x27, [@generic="ec17feffd532e5d3", @typed={0xc, 0x35, @str="6367726f75707f00"}, @typed={0x8, 0x6, @ipv4=@broadcast}]}, @nested={0x14, 0x85, [@typed={0x8, 0x3b, @pid=r3}, @typed={0x8, 0x31, @pid=r4}]}, @nested={0x1248, 0xa, [@generic="4cfee938ee5a27655e179ba3cd85107a26563b71ee636be60ebb99bc6b0ae0aadf4d8582606968abcc8c79841ff620dad0711e6f7c0f009ba4cb468a4bbc73c4d50e18d27839cc36d14f91b216a20718795ef4db8da2fa0b689bb39ee81abae72c066a7189f1b2795c5ea074dff5bca4c06a57b7bb14a6d8547fe885e0c287d60e98e90065b590af2beeed656dd375f263e23e769a61a9cb66e43e769ef367b74fec3e77d20ea8c2225e82f90466bfc4640e98ac40f63c86af54ee65946b0fe237120a8cf0ca001a5bc427d304fbe01f3faea66b", @generic="a1b10518", @generic="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", @generic="eff46a5c25131e98f4e32d0651f1d83e71b9f60a181d037dac556726d9c79c330365c691edbbc0aa4d7eb65098f660e2872fbf0083f59c4b3bedff1a6428d90de45a7034e6608f67ba6769948574427a40d6fb4283dcb54daeefbb0048a3527a62c50e50c2398e63e4c4eaa6a17e12168d052f43a2aaf22b2e6ee542b66d958979e77f", @typed={0x8, 0x77, @fd=r1}, @typed={0x8, 0x8a, @uid=r5}, @typed={0xc, 0x53, @u64=0x9}, @generic="af6d4a2b94d9177840bffa67c9529782d9b962204aee5556723f5f197977ed3a80c34a99c56794adab707dbe27bb3cc4adaf315506b6e9cadb716d0ac750a6f028424f447d5ca1de91ec479b659b2d2e974e8356068209f06d2bc55c9de76afb23be70c18a3a10a585a94c851540075316a51feff4653d33572d2ca075e9108185055040799a94cd674b1ef38d272962bca5175c3d1e56f36c021f80caa253ac38f4b8ed46da72b82c6651e5392c9c4d690ffff6b54625be5e1816810a", @typed={0x10, 0x3b, @str='/dev/vhci\x00'}]}]}, 0x1308}, {&(0x7f0000002980)={0x284, 0x24, 0x702, 0x70bd29, 0x25dfdbfd, "", [@generic="7013fbdc107c14aa71e565382a568c6644e7cfe7a78a45352b32d3cebce4957330e705ccfde61a01961cfe34207f5667929723f137b8b163156ab6baced737609ace0efa1ad8f4736819c5748afbd0d455a2ba7b7c673d93df1e274ffcf2c297eed5e7a7c5c6126d189f5631ab7713b904113f641751262a1789fa6de92db3a371eb22fbd5b5abba6e5da3f60e4b21d7627e31ff92f21f83821cd89a2f7fe985699c281abb0f7b20cc3a4be940a5f7ac52b1107382503ceee8502f25d2bc7a921df1eac20564def06481ce77bf00c9", @generic="d591e47107d00bddcf671a01e8e5dc60df7649cb8953e261cbddc112445f9a62230653627e8f255feac4d34546863f5a8498a27a53fa1847f0a3e4e91fe33135224c9f490b778e35cf0cdaa969a3f44917138a527c71639a1815842a7a1fed1767ca1a9147a6e5afe260db0165e233bbc2b4b5ac9fa0be16803003d9bcce79c4ae4123c28a856183140ed73b72e57b8269550506fe9a68c21c6a201aaf710538007c80dc3f532d12071f8443faec7267328a526ca8986a77a373e4d7673367bb84e8626a62562bec1bcab14b10cf", @generic="38b57cbdfaf4f027a0ebd66f11c8b8e0a6765ced0c0c14d5b0856ed48ffbd50716f68b40aa1aadaccd0d3cb89e518db375fd15096399b007e4b8c654df7670becaf621a45ffd387d45502b826deb2da05911de99f19f01545804ea750104b1be6025aa55eb9144dfb46627f17e7af847cb7215328061692c2ad0813689f3312cd793c4086a90a5b7d994ddff9ac36a10ec0093f9f03d26f70280d6e081d2bf8569b942fb3f2714fdb364e700e86b89da5f526316f6d561b2c6fd6da82ce275a1bebe376cfc6bc7bc3f6564a2b6cc4b6a10df4b3b"]}, 0x284}, {&(0x7f0000002c40)={0x30, 0x1a, 0x200, 0x70bd25, 0x25dfdbfe, "", [@generic="31724b1c37010275b59fc056ddcb70f060a6c6821f6572410f50a0f30f9d181c"]}, 0x30}], 0x4, &(0x7f0000003000)=[@cred={0x20, 0x1, 0x2, r6, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x40, 0x4000}, 0x4c000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000280)={[], 0x610, 0x7, 0x2, 0x0, 0x3, 0x3001, 0x0, [], 0x9}) close(r1) 03:33:21 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) kcmp(r5, r6, 0x0, r3, r4) 03:33:21 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x115, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$packet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4e84aaa3c292"}, 0x14) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000280)={0x7004, 0x104000}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001bc0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002980)=ANY=[], &(0x7f0000002b00)) r1 = syz_init_net_socket$llc(0x1a, 0x80000000000002, 0x0) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) write(r1, &(0x7f0000000200), 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000000600)=@nl=@proc, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000001680)=""/198, 0xc6}], 0x10000000000002c7, 0x0, 0x0, 0xffffffffffffc1fb}, 0x5}, {{&(0x7f00000017c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/194, 0xc2}], 0x1, &(0x7f0000001980)=""/232, 0xe8, 0x5}, 0x7}, {{&(0x7f0000001a80)=@rc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/157, 0x9d}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000001c00)=""/101, 0x65}], 0x3, &(0x7f0000001cc0)=""/130, 0x82, 0x7}, 0x8}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/206, 0xce}], 0x1, &(0x7f0000001f40)=""/34, 0x22, 0xffffffff}, 0x2}, {{&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002000)=""/240, 0xf0}, {&(0x7f0000002100)=""/79, 0x4f}], 0x2, 0x0, 0x0, 0x10001}, 0xff}, {{&(0x7f00000021c0)=@nl=@proc, 0x80, &(0x7f0000002580)=[{&(0x7f0000002240)=""/131, 0x83}, {&(0x7f0000002300)=""/55, 0x37}, {&(0x7f0000002340)=""/226, 0xe2}, {&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/98, 0x62}], 0x5, &(0x7f0000002600)=""/70, 0x46, 0x7f}, 0xdcf}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002680)=""/50, 0x32}], 0x1, &(0x7f0000002700)=""/31, 0x1f, 0xabf}, 0x81}], 0x7, 0x2000, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'U-', 0x3}, 0x28, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002940)='/dev/qat_adf_ctl\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f00000004c0), &(0x7f0000000580)=""/104}, 0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000002a00)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x401}, 0x4, 0x6}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000440)) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000340)={0xd7, 0x5}) dup2(r6, r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)}, 0x10) lseek(r0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r5, 0x81}, 0x8) shmctl$SHM_UNLOCK(0x0, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002a80)=ANY=[@ANYBLOB="03000200000005007bd49fffe9e61718c37cb00be9b3565ab9d955bdfeba156dab360a95492a6af618a10434c4ff030000000000004d83574949014ea7bffdbab36b81aff045ccb5c2e929705e5551a07d683a5dbcc1465aaa7d4493c5179897867f5ce915f4e38f586a051445260656b83785a940e9"], &(0x7f0000000540)=0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 03:33:21 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100) ioctl$TCSBRK(r2, 0x5409, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'veth0_to_bridge\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x80240) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="03451a8e3c88ae7d3921d4fed8b6b0d5ae82ad0c92ca7183616bb5a74befd952d61420bbef578f8c2355bd27a91eb9cca6a50fce0ef6acbd70669a369de13daa846776c333107a207dc4fb702fe58a7b5d90d6d10c7e818b85e9803b367b5bac3c0d5c50b939761f5084db7566f7163a8d69f912f057a2cb0eb729b622d61a1970851b3c2128225d250f0e6fe16f14438f1fc28214ead497c9c99c7605340596f839df56fad3bff523bf3f9c52196be697dd25ea78d7b43990c9a79f01ddc7c5245a5a97719a7a95b43f59677f230fc7cff2179bad8407a74c82498398609b773bb824f2db1180e35deb4dbea8e5a7bd1f89679538abc3e06b2b24aa6217d6b6") unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0xfffffffffffffd87) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) mlockall(0xfc) unshare(0x40000000) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000580)=""/190) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x10000, 0x1, 0x1, 0x101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYPTR64, @ANYBLOB="6b1c831d1d01ae136e5e96393f1a14cb440f717996b80f56709f90e16746b4ba807ff549c6595b443370538b9f78426f2fc242ff723b59d85e9e6d8f43221606c8b6fafec6d190f647dc03b87f8676f747052aa56e3dc25c9a64bfd170e3c94c143cb04bd61f8437ab32acdef328f27c93806a61b3ed1825e8c05fbd119754ed7649c642c998578c112d29bdf939d0ed0c5d34ad7a6b9cddfa8df53d12b2d72354951ff64fadbfa86fe7d8d99a767f78454c9d2508c601f098cae06647fba903bf95dabf7465a412d2cdfa5eea636ec541be1244adcdd103300efe89f00dcd"], @ANYBLOB="c5bfb70633f6e2e73e6cb3744c5c26d87886a331bd6f22c64c5616836cdd3a9a3f180c804368fdbf4b07d406758a1035c30a0e7d2f2f0aa54f3dc8cf17e1ceedd990ffaf0dca55fe17db1176eccd0eee583b3948ef18646f94c74d0d91710690fda83afe8a7bbe39ea279de41257b6d55cb0a400a4472646afe22456b62f3ac68f31511c4d3873aa81d816881fab84d2b81cc776c5335ede01d2ada4829db35e0bc71c1628719bd66d21224ad944cd92a31bd83e06622e08c704e8ba8627475b9de41484247acb777c7afdc7583fe9ed7f06d9cef443340683", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="9c2877890641cc7cadee1dc0603cff5626f45b4b24e3244d9bef2ee72019f7820a5e04066407f1afb198e4557972617bca2ecafbac24cbdd814ea0fa7c43cabc0bad4eeb8eb9f13524cbd23e3556ba5da1b56922313a491327f6703c708947a91d46806357bb493470cf42143251c026488081b48a780c6e2047b88864cfed5f9dbecf4d27b671204abbfd25639df9c9260976a0c37e733af37ab2531412a5bc7feefd3821fa3eab4025e96172bed8048ce91eca42a02a791c7f7622baf9a4b16aa04bf013b160f55d7d0375ee87100966b0433950a1fbc8906aec69354d3e31c0478b5eb1cd2d71", @ANYRESOCT=r0, @ANYRES32=r0]], 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0x7530}, 0x17, 0x1f0000000000, 0xffffffffffffff7f}, {{}, 0x17, 0xfffffffffffff000, 0x8}], 0x30) bind$bt_hci(r1, &(0x7f0000000240), 0xc) splice(r1, &(0x7f0000000040), r1, &(0x7f0000000080), 0x2, 0xc) close(r0) 03:33:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000031a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 288.901723] QAT: Invalid ioctl [ 288.934028] IPVS: ftp: loaded support on port[0] = 21 03:33:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={"6c6f000acc0000000000000000002600", {0x2, 0x0, @rand_addr=0xfffffffffffffffe}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x40) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00'}) 03:33:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={r2, 0x6, 0x400, 0x622, 0x3, 0x1, 0x7f}) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:21 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x80000001, 0xb) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r1) 03:33:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400000f1a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000000f0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="24000000670001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:22 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='dummy0\x00') r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) close(r2) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)={0x2001}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff801aa7ecbf1c11db29b89c11a60145a4fde95a3a5465a54974f27068028a14a1ea140eaa2352a8f8ef4d4fcbf5983077510823b511b05084f4bc8b19d8e773f95b58d5c34240a09746330e544de476940ff328d5"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x8, 0x8001}, 0x8) 03:33:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0005f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:22 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100) ioctl$TCSBRK(r2, 0x5409, 0x2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'veth0_to_bridge\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x80240) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0xfffffffffffffd87) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) mlockall(0xfc) unshare(0x40000000) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000580)=""/190) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x10000, 0x1, 0x1, 0x101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:22 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="ff01508e83b555c8663b1e693879b8aeff6219415e9e977c8ef0acc1fa300395569007775778356b91b05b93ee14e49d418deb94bca253276f10546960635f757c72973f34b600cbeb92637e76b3921a2701807b7c6287ed9dd59f048903c8f8991043102fad98b68dd77c79322efbd9b454808cde3d109a7f4590922466bde36a1b12a51b1880cf3ae732f0ddb531bd3039a4fc93ef4e695afd6dfcabd39aa917d73714b855d62646a7d77e4fe96c90032d5df8a0f2dc8dd2d294bef4b9c144a1e7049fcff51c96747b0b95729748bffef93a1d412774e7dcd41f3d686bcbc9d53c79ab15cf642558e67e540848ebee"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a6001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x246, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x28c801, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x2, 0x0, {0x3, 0x7, 0x1f}}, 0x28) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r4, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f0000000180)) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) ioprio_get$pid(0x3, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240), 0xc) write$apparmor_current(r0, &(0x7f0000000040)=@hat={'permhat ', 0x1, 0x5e, ['/dev/vhci\x00', 'GPL(\x00', '\x00', '/dev/vhci\x00']}, 0x35) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:22 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) kcmp(r5, r6, 0x0, r3, r4) 03:33:22 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) [ 289.950377] IPVS: ftp: loaded support on port[0] = 21 03:33:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0201f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:23 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) kcmp(r5, r6, 0x0, r3, r4) 03:33:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001afc01f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x2000, 0x0, 0x3ff, 0x8001, 0x0, [{0x8, 0x5, 0x80000001, [], 0x6}, {0x2, 0x9, 0x9, [], 0x1013}, {0x6, 0x6, 0x80000000, [], 0x4}, {0x3, 0xfcd9, 0x3, [], 0x9}, {0x9, 0x4, 0x8, [], 0x3}, {0x6, 0x6, 0x3, [], 0x1}, {0xffffffffffffff23, 0xdb, 0x9, [], 0x3}, {0x20, 0x7fffffff, 0x80000000, [], 0x20}, {0xed7, 0xfffffffffffffffb, 0x5, [], 0x8}, {0x7ac, 0x1, 0x9, [], 0x2319}, {0x80000000, 0x1, 0x9, [], 0x1}, {0xa, 0x6, 0x0, [], 0x401}, {0x5, 0x1, 0x4bb, [], 0x100000000000000}, {0x3, 0x6, 0xfff}, {0x2, 0x100, 0x8000, [], 0xffffffffffffffff}, {0x6, 0xff, 0xff}, {0x0, 0x8e7e, 0x7f, [], 0x8}, {0x20, 0x2, 0x9, [], 0x10000}, {0x5, 0x20, 0x7f}, {0x9, 0x1, 0x7, [], 0x800000000000}, {0x5, 0x0, 0x10d, [], 0x3}, {0x1, 0x9, 0x10000, [], 0xd3e}, {0xe5, 0x4, 0x101, [], 0x5}, {0x5, 0x5, 0x4, [], 0x2}]}}) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f00000001c0)='./file2\x00', 0x400) rt_sigreturn() 03:33:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0011f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:23 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x4002000, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000540)="bb0890affa4575690ec6e10d5b91d2247b73967d63b6ae3e84a4ab04fbe28b283e3c00132d4e7e34233143a1abf00f9c098482b1c717ce0ba909af3a158ee71567eda59271257825c603a436089d82c8e176fc32730a8523de5080e36d1e4c01783e8f8caf92197d34b6606a9adf3d08c89e59b6a9b689dfd41120c134c340cc192e", 0x82) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040)=0x500, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@remote}) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000640)='/dev/nbd#\x00', 0x0, 0x40) syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0xfffffffffefffffe, 0x7fffffff, 0x82b}}, 0x30) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000600)={0x0, 0x8001, 0x1}, 0x8) 03:33:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0223f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:33 executing program 3: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) kcmp(r5, r6, 0x0, r3, r4) 03:33:33 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:auditd_log_t:s0\x00', 0x22, 0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xfffffffffffffffc) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:33 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0301f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:33 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x24c, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:33 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x4002000, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000540)="bb0890affa4575690ec6e10d5b91d2247b73967d63b6ae3e84a4ab04fbe28b283e3c00132d4e7e34233143a1abf00f9c098482b1c717ce0ba909af3a158ee71567eda59271257825c603a436089d82c8e176fc32730a8523de5080e36d1e4c01783e8f8caf92197d34b6606a9adf3d08c89e59b6a9b689dfd41120c134c340cc192e", 0x82) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040)=0x500, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@remote}) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000640)='/dev/nbd#\x00', 0x0, 0x40) syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0xfffffffffefffffe, 0x7fffffff, 0x82b}}, 0x30) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000600)={0x0, 0x8001, 0x1}, 0x8) 03:33:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0f01f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:33 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000002c0)={'bond_slave_0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) getpgid(r1) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="2b1ac6d10bb4ebe88e77ef28805de9aed21e318c410504099cfcda00517c86dca7610aff800b26bf986af1d517e7a6440c8fdd540510333fa1e9146874e769ca0011d05f875c4cfac50008d1ebe34b2a8fe18be969722dd87bef864a4fa2f434cd26676f750ac4649d847caa54e837e9a2ef34f652ec766192c85bb4ef0cd515cb22787d9ae58f7c62814d225fda29a570ae083100000000000000000000"], 0x2) write$P9_RLERROR(r0, &(0x7f0000000180)={0x39, 0x7, 0x1, {0x30, 'systemwlan1nodev--eth1vmnet0eth0wlan0\\vmnet1#&-\x00'}}, 0x39) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) pwrite64(r2, &(0x7f00000000c0)="19dd1727b655c7096bf092322a05902548815d446ec182c4082aad2ccdd7d99437824a3fc9067e8838d052097e24ad046033b074dcee1f43725136d86f686750ced713766820716a98ae49f3c151f8657e37b7a871c73a60033b52784e50e3074d1c5e5f23d0303621b1f8984df2d8eae599a228ef79561c6f696ffe0ecf9f26", 0x80, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000003c0)={'raw\x00'}, &(0x7f0000000040)=0x54) close(r0) modify_ldt$read(0x0, &(0x7f0000000440)=""/188, 0xbc) 03:33:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000008912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 03:33:33 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7dd8fa66fddb24e6a86a3a4602493b0b63a19a9a1200db16ae3a79b95a8b8181f18ee95fe77b3e241bdb11c484f6d796acdf713dded4d95d13d6544daa3f676a63b26c881950a3599466512cc44e89744187a6021e7a7269d7447c7c3843a6e568d2a76d926245905ce736a909c76c67f38ffc8e1d44e88b0dac83e67abafd7b89121305b4"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040)=0x100000001, 0x4) 03:33:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0300f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000008912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 03:33:33 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x4002000, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000540)="bb0890affa4575690ec6e10d5b91d2247b73967d63b6ae3e84a4ab04fbe28b283e3c00132d4e7e34233143a1abf00f9c098482b1c717ce0ba909af3a158ee71567eda59271257825c603a436089d82c8e176fc32730a8523de5080e36d1e4c01783e8f8caf92197d34b6606a9adf3d08c89e59b6a9b689dfd41120c134c340cc192e", 0x82) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040)=0x500, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@remote}) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000640)='/dev/nbd#\x00', 0x0, 0x40) syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0xfffffffffefffffe, 0x7fffffff, 0x82b}}, 0x30) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000600)={0x0, 0x8001, 0x1}, 0x8) 03:33:33 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x2d, "e413781c8f706720892c39f762ee0fae848366c94dfe6941fd6b74d46565346d4576700e6ed20afa152ea41f99"}, &(0x7f0000000240)=0x35) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={r5, 0x40, 0x10001}, &(0x7f0000000400)=0x8) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a003ff00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:33 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1, 0x4) close(r0) 03:33:33 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="30870641f196644ae8c261a1bbd41f338a6a8ff48033ca35e21238db26af3cac8873ff6b63974216959c6f1b01e8a5ceac1e18f64729"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0xa9, 0x8000}) close(r0) 03:33:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/uts\x00') semget$private(0x0, 0x0, 0x24) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000540)=""/56) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000440), 0x8) uselib(&(0x7f0000000000)='./file0\x00') geteuid() 03:33:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0005f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:33 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000100)="29b27343e3d5b4cc6333b938843037e28473e456dc4a41882e47e21493ce2d883b876bca0d0ca05b4b115b9b2638b023e3d213b883df61ebd93893a98cc308ab20c7b07c925fa44e6f8ea1c5dae5471a2c1c7076f4ee88e5e0d96ecf9c9351b26384d7062bb2476f04c21f17fae876153e94e111cff8cfa8847e3b8741f68e16cb63df3c29713858d4c7686f816f1bc927a2ef5700870c8da2536c512e76953df4fc222acf5e227b50a86e438b9891fbdba3cb4326981190298aa0a1212e51160e004d162763ae29215c162602e0128ef634dfc5", &(0x7f0000000080)=""/23}, 0x18) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7fff, 0xe1, 0x4, 0xcd, 0x3}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000400)={r2, 0xecee}, 0x8) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000002c0)={0x9, 0x4, {0x53, 0x7, 0x1, {0x1, 0xffff}, {0x0, 0x1}, @cond=[{0x0, 0xffffffffffffffb3, 0x2800000000000000, 0x1, 0x401, 0x6659}, {0x7, 0x3, 0x160000000000, 0x8, 0x5, 0x101}]}, {0x0, 0x20, 0x480000000, {0x6, 0x4}, {0xce32, 0x2}, @const={0x9, {0x8, 0x10000, 0x7fff, 0x2b}}}}) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="04a7936150cf1175b41bc76dd655b42c"], 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240), 0xc) close(r1) 03:33:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0011f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:33 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) 03:33:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/uts\x00') fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x98391aa8d00f7f6a) semget$private(0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x24) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f0000000540)=""/56) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x8, 0x64a6aba6, 0xffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000440)=0x100, 0x8) dup2(r1, 0xffffffffffffffff) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) uselib(&(0x7f0000000000)='./file0\x00') r4 = geteuid() getgroups(0x2, &(0x7f0000000380)=[0xee01, 0xee01]) fchownat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r4, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x8000) 03:33:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00f80000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:34 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ashmem\x00', 0x4002000, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000940)=ANY=[], 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000540)="bb0890affa4575690ec6e10d5b91d2247b73967d63b6ae3e84a4ab04fbe28b283e3c00132d4e7e34233143a1abf00f9c098482b1c717ce0ba909af3a158ee71567eda59271257825c603a436089d82c8e176fc32730a8523de5080e36d1e4c01783e8f8caf92197d34b6606a9adf3d08c89e59b6a9b689dfd41120c134c340cc192e", 0x82) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040)=0x500, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@remote}) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000640)='/dev/nbd#\x00', 0x0, 0x40) syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x101000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0xfffffffffefffffe, 0x7fffffff, 0x82b}}, 0x30) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000600)={0x0, 0x8001, 0x1}, 0x8) 03:33:34 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="ac3701ec1ce426b594c2d65d1a7993ff84"], 0x2) write$UHID_CREATE2(r0, &(0x7f0000000280)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x60, 0x9, 0x2b, 0x9, 0x4, 0x5, "422e907b113b95050ada1255165c36263b7ce966141952973d5a10eefc8745c7df4db6d1f5aec8492de4927acd2d18635e94ec560e9f5cd7d44f3df58b9c947798a80646affa14e056fad31b88ffbd6c272a546fdd7cfa75875998e0fddaa475"}, 0x178) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xfffffffffffffebe) sendfile(r0, r1, &(0x7f0000000180), 0x8) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) close(r0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000140)=0x80) r2 = getpgid(0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0x0, 0x4, 0x100000001, 0xf3fc, 0x80}) sched_getscheduler(r2) 03:33:34 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80020601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) ftruncate(r0, 0x7ff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000240)=0x1e) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(r0, 0x0, &(0x7f0000000380)=0xffffffffffffff93, 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000200)) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@mcast1, 0x4e22, 0x4, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0xff, 0x0, r3}, {0x4, 0xfffffffffffffff7, 0x9ee, 0x8, 0x35b, 0x4, 0x2, 0x8}, {0x2, 0x5, 0xffffffff80000000, 0x7}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x9, 0x4d3, 0xff}, 0xa, @in=@multicast1, 0x3506, 0x4, 0x3, 0x9, 0x80000001, 0xfffffffffffff800, 0x3}}, 0xe8) 03:33:34 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x88}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x100000001, 0x2, 0xbdeb}, &(0x7f0000000140)=0x10) close(r0) 03:33:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/uts\x00') fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x98391aa8d00f7f6a) semget$private(0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x24) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f0000000540)=""/56) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x8, 0x64a6aba6, 0xffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000440)=0x100, 0x8) dup2(r1, 0xffffffffffffffff) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) uselib(&(0x7f0000000000)='./file0\x00') r4 = geteuid() getgroups(0x2, &(0x7f0000000380)=[0xee01, 0xee01]) fchownat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r4, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x8000) 03:33:34 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f06080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:34 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00280000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/uts\x00') fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x98391aa8d00f7f6a) semget$private(0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x24) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f0000000540)=""/56) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x8, 0x64a6aba6, 0xffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000440)=0x100, 0x8) dup2(r1, 0xffffffffffffffff) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) uselib(&(0x7f0000000000)='./file0\x00') r4 = geteuid() getgroups(0x2, &(0x7f0000000380)=[0xee01, 0xee01]) fchownat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r4, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x8000) 03:33:34 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000280)="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", 0xfa) accept4$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x80800) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x4, &(0x7f0000000100)=0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) close(r0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000140)={0x13000, 0x2000, 0x1, 0x2, 0x7fffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 03:33:34 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) close(r0) 03:33:34 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f0003f000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r0, 0x80287010) 03:33:34 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000005040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7}, 0x7) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x2000, 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioprio_set$uid(0x3, 0x0, 0xb4) connect(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3, 0x80) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x811, r2, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x1, &(0x7f00000008c0)=[{&(0x7f0000000800)="22229de29aa2766cec4f296cdb562469319fc53d3f89b9373a9f54547357ce6d342bf2ac00fe04ee65b522254d52fc1485f18c1c719f3baa89bba55e9e57b2dc8c92c7efe2629c5b84c0019538d483f020c42d34415cf81f0883546a3d0c32c2496bd8884b8b21a104919695eff3c12633a1cdae3d", 0x75}], 0x8000, &(0x7f00000009c0)={[{@utf8='utf8'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_yes='show_sys_files=yes'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x77, 0x37, 0x67, 0x3b, 0x76, 0x34, 0x73, 0x3b], 0x2d, [0x77, 0x7c, 0x7b, 0x76], 0x2d, [0x64, 0x75, 0x37, 0x74], 0x2d, [0x36, 0x7f, 0x30], 0x2d, [0x7a, 0x32, 0x39, 0x31, 0x0, 0x33, 0x76, 0x33]}}}]}) 03:33:34 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) sendto$inet(r0, &(0x7f0000000100)="54dc768eb94818dc8538", 0xa, 0x4004004, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d380"], 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0xf1, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) bind$bt_hci(r1, &(0x7f0000000240), 0xb) close(r0) 03:33:34 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00', {0x7, 0x8, 0x8, 0xcb}, 0x27, [0xffffffffffffff81, 0x3, 0x8001, 0x7, 0x4ba6, 0xfffffffffffff800, 0xffff, 0x6, 0x73e, 0xda14, 0x4, 0x6, 0x10001, 0x2712, 0x0, 0x0, 0x401, 0x27c5, 0x200, 0xfffffffffffffffc, 0x8, 0x5, 0x6, 0x5, 0x0, 0xe85, 0x35caf2fa, 0x9, 0xfffffffffffffe01, 0x50000000, 0x1, 0x80000001, 0x33, 0x5, 0x8, 0x3, 0x100000000, 0x9, 0x7fffffff, 0x5, 0x3, 0x101, 0x0, 0x6, 0x9, 0x4, 0x9c72, 0x2, 0x9, 0x140000, 0x4, 0x4, 0x7ff, 0x6, 0x7, 0xde2, 0x7, 0x1f, 0x101, 0xffffffff, 0x5, 0x2, 0x80000000], [0x401, 0x2, 0x8, 0x0, 0x6, 0x66, 0x2ac, 0x20, 0x3, 0x20, 0x7, 0x9, 0x6154, 0x8, 0x8e2d, 0x2, 0x40, 0x5, 0x6, 0x1000, 0xffffffffffffff7f, 0x3, 0x3, 0x5, 0x6, 0x1, 0x1, 0x90, 0x8, 0x1000, 0x6, 0x3, 0x392204c5, 0x3e0b, 0x1, 0x1f, 0xff, 0x1, 0x9, 0x2, 0x4, 0x5, 0x7, 0x7ff80, 0x2beb, 0x79, 0x7, 0x6, 0x1, 0x7, 0x5b, 0x6, 0xfff, 0x20, 0x4, 0x3, 0x5d, 0x2, 0x7, 0x2, 0x7, 0xfffffffffffffff7, 0x6], [0x4e, 0x200, 0x4, 0x5, 0x2, 0x4, 0xfffffffffffffff7, 0x20, 0x3ff, 0x6, 0x3, 0x11, 0x2, 0x7ff, 0x2, 0x8, 0x92, 0x81, 0x0, 0x5, 0x9, 0x7fff, 0x6f00, 0x8, 0x0, 0x67, 0x7, 0x400, 0x7, 0x3, 0x9, 0x100000000, 0xf5, 0x6, 0x2, 0x1, 0x200, 0x2, 0x1, 0x100000000, 0x5, 0x6, 0xffffffffffff8000, 0x4, 0x7, 0x2, 0x0, 0x4, 0x2, 0xff, 0x0, 0x9, 0x2, 0xacf1, 0x3f, 0x8, 0xfffffffffffffaf5, 0x1, 0x69, 0x4, 0x0, 0x609, 0x81, 0x80000000], [0x8000, 0x4, 0x0, 0x8, 0x8, 0x1, 0xffffffff7fffffff, 0x8, 0x3ff, 0x3f, 0x800, 0x2, 0x7, 0x2, 0x101, 0x80, 0x3ff, 0x1, 0x9, 0x9, 0xffff, 0x9, 0x6, 0xfffffffffffffb1e, 0x8, 0x1, 0x8000, 0x8, 0x100000000, 0x7fff, 0xfffffffffffffffa, 0x6d4f, 0x4, 0x4, 0x9f7, 0x0, 0x2, 0xfffffffffffffc01, 0x66, 0x9, 0x6, 0x80000000, 0x2, 0x6, 0x8, 0x9, 0x3, 0x100000000, 0xfff, 0x0, 0x6, 0x9, 0x401, 0x3ff, 0x6, 0x3, 0x200, 0x1f, 0x3, 0xc7, 0x7fffffff, 0xffffffff, 0x4, 0x5]}, 0x45c) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:34 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "1652f36ea157321a5bb1f32bd24068e2bc9bc70c"}, 0x15, 0x1) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xa, 0x811, r1, 0x0) 03:33:34 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f0fc80000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:35 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2e545f139671a307e335ff5955e907d9aaad8dd9ea736d6916278a9c57cded9c9e3fff661ba24587d3"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x3, 0x7fffffff}, 0x0, 0x4, 0x0, {0xfffffffffffffff9, 0x2}, 0x3f, 0x3}) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00380000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 302.245058] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 03:33:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r0, 0x8008700b) [ 302.302312] ntfs: (device loop0): parse_options(): Unrecognized mount option fsuuid. 03:33:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f000800e8800ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:35 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="400034f6d7d4b0fdc469d023b3f6c3cbdb3864def9cb1c34d5d3cd907e58bc7b5b504e29cd7d99c00890c6ddc166adeb8e0cb44a30326b0d5a820e6f29c4e586c40405cfaeb20ac020f5eac9377ef27a9603a9f5f44cc9c6d31811275f0454999dc0636370ef4cb8eb944c12f38fd6c9575a00cb53b101267089da010981fdb0cc26df8f105c1561649f0b902d4d35"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080001100ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x2e2}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="cd542a93253fab19fe378f2a"], 0x32c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, r2, 0x4}, 0x201) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={"7c65616d300000001200", r3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:35 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) fsetxattr$security_evm(r3, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@ng={0x4, 0x2, "fc4de2f79f"}, 0x7, 0x3) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1fc) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:35 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="fd580aad9c17ff80c4c1e9a507bd8487812f9e8b6e010029a9c52a1f500f0e1677bcd581a7ca2d96b96b897c8b0960cb8ecf9e0856a562a4d1d7df704c0bd9860b1108000000c95ded0258a03f27c7fc27232249a14c1afe9011ad8fb3415990a2e68d02e74c58db72c2753bc9cc47841f90c31ad05289ee29df97000000"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[{0xb, 0xffff}, {0x7, 0x7f}], 0x2) close(r0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="32bee143bdbeca2600bab9e6f0b1be44", 0x10) 03:33:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080030400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:35 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000000000001000000000000005700000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000040000000000000d600000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000953f3970786a899100f00000000000001600000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000001d00000000000001600000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200)=0x2, 0x4) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x3}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:35 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) 03:33:36 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f000800f0400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:36 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe8a"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:36 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1880af4c31f80f22154fdff2e5795ae348119d9cf77cd99611c20ffd8abab9dc81"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:36 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080600400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x2e2}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:36 executing program 1: io_pgetevents(0x0, 0x7fff, 0x8af, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000003c0)=ANY=[@ANYBLOB="090000000000000000000000000000000000000000000000000000000000000000000000000000005d17c55a103afb19b203b07dd7f0fe53ef5ad4f0305445b74d2d52de2143aead9bdef00cafbc457a14771e72edd0082611e5cce74f8533b15747d251cee0fe6cd5b80d38ae0fc71344590eb0ad60c33574a0a4e9c1937f8a323bb33141cdb5066ecf6b20e98e07b37314f490c02e09869af0c6d10a300898fe9fe433857a0fd3c37709d23669109f4f914a78b59890e3c88fd8d6306354f81b3dc11a23f36a"]) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0xfffffffffffffcc0, 0x800) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000140)=0x4000, 0x4) 03:33:36 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080020400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:36 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r1) 03:33:36 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080fc0400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:36 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 306.109627] IPVS: ftp: loaded support on port[0] = 21 [ 306.150293] device bridge_slave_1 left promiscuous mode [ 306.156360] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.191662] device bridge_slave_0 left promiscuous mode [ 306.197166] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.374532] team0 (unregistering): Port device team_slave_1 removed [ 308.384852] team0 (unregistering): Port device team_slave_0 removed [ 308.396462] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 308.434682] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 308.489275] bond0 (unregistering): Released all slaves [ 309.029510] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.036261] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.044405] device bridge_slave_0 entered promiscuous mode [ 309.093277] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.101159] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.108597] device bridge_slave_1 entered promiscuous mode [ 309.156454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 309.204854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 309.347412] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 309.398316] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 309.617310] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 309.626035] team0: Port device team_slave_0 added [ 309.672754] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 309.680400] team0: Port device team_slave_1 added [ 309.725032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 309.732644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.750023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.790344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.840205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 309.847370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.864868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.894873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.902405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.910815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.272829] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.279189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.286000] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.292368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.300035] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 310.599932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.281695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.373102] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 311.464471] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 311.470850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.477864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.571324] 8021q: adding VLAN 0 to HW filter on device team0 03:33:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0x235) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 03:33:45 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="47ea90e89b6699f82527aeed"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32=r0], @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="5a06603157cbf00a1260cc735e729a77f7266584415664a22bbcfeec7410040cbf74bbf6f2685e7ef77edf9b8804d0062f5fb8a5000fdc33b87bc7b29b4455b465efaab479e859ffaec2a2ffe13e0f7fd1d5d39388218001860c98f1d72fce14dbb35db20152801ec0f740c9e48f0fac3f797f2e2d49dab0344514fac8f45de09af4012975ae591fe5af4e7ca38286c5fd4029378a77d03817c66a91af994e7ecbb3ff67eb5256a91c67daacdeba6795aa6fd604954e96bb35396f3257bf361c4f", @ANYRESOCT=r0, @ANYRESDEC, @ANYPTR64, @ANYRESDEC=r0]], @ANYRESOCT=r0], 0xfffffffffffffca6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x2e2}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f0008000880eede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:45 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4f27f00", @ANYRES16=r2, @ANYBLOB="0b032dbd7000fedbdf25060000003c00020014000100e0000002000000000000000000000000140001000000000000000000000000000000000008000b0000000000080004000200000040000200080006000500000014000100ff0200000000000000000000000000010800030001000000080005001c000000080006000700000008000b00020000003c000200080002004e24000014000100ffffffff000000000000000000000000080006004000000014000100ac1414120000000000000000000000000800050002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x98651eb47e49e0f1) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080001100ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:45 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) pipe(&(0x7f0000000040)) 03:33:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000080)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x4, 0x6, 0x400}, 0x10) close(r0) 03:33:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f000800004fcede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x2e2}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000403ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:45 executing program 2: r0 = userfaultfd(0x80800) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x2, "0a41179f3cf3fec9"}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffde154349695e848de000f444c75908cf97c13780"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) close(r1) 03:33:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="ff8081034a34b8ae1cee16ca053bbce46f88a1dc89410f7707afde94cb3f6ab9dc44fe1920ecdc0598d57d476328899d54b3a11dabbae5e09ca0e85cb6216d2e77d11ab4714bde972bce2ac58be22eaa075ab755208b1b54e97f32c32024537796536abcb7741b0bfac0e41eeeec4ebc5d1ce9988fc4025f49eb3ef11bd64f85eba5fad7c0a2cc3e73620d5a31c18696e6d7b022966b6ac0449411724a9a7e27442cb3cf2d155c96a2a12de79d2e025c658efc3900bd"], 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x6, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="060225bd7400fcdbdf25030046b5bbc572000008fa0300000000000800451cd59601004e210e"], 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) close(r1) 03:33:45 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) sched_setscheduler(r3, 0x7, &(0x7f0000000180)=0x5) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf540000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f0008000040fede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:45 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80040, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@v1={0x2, "89"}, 0x2, 0x3) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$KDSETLED(r0, 0x4b32, 0xfffffffffffffffa) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@v2={0x5, 0x0, 0x0, 0x3, 0x57, "757ea72a9aeb77020ccd07724e73d480190bec1e010c7a7a504c51be24a400f437e5f3fff807b70d612b1d1a84376b32ed85fbd44cc212f9abd298d7a1f7d6406808bafff35e8b32891f077729d6e972f75b800485c12a"}, 0x61, 0x1) close(r0) 03:33:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d430100000000009500"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x2e2}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:45 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000460ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:45 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0xffffffffffff4731, 0xffffffffffffff81, 0x10001, 0x3f, 0xffffffffffffff27}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, &(0x7f00000001c0)=0x8) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x7) bind$bt_hci(r2, &(0x7f0000000240), 0xc) close(r2) epoll_create1(0x80000) 03:33:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x2e2}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000402ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x2e2}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:46 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000500)={0x4001, &(0x7f00000004c0), 0x1, r0, 0xe}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, [0x7487, 0x6, 0x4, 0xbdb]}) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000003c0)=""/162) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000480)={r4}) close(r0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) 03:33:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede8110af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:46 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) [ 315.383647] IPVS: ftp: loaded support on port[0] = 21 [ 315.770148] device bridge_slave_1 left promiscuous mode [ 315.775748] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.820657] device bridge_slave_0 left promiscuous mode [ 315.826089] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.009273] team0 (unregistering): Port device team_slave_1 removed [ 318.019433] team0 (unregistering): Port device team_slave_0 removed [ 318.031785] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 318.083393] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 318.140117] bond0 (unregistering): Released all slaves [ 318.562367] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.568837] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.576703] device bridge_slave_0 entered promiscuous mode [ 318.623743] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.630623] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.638020] device bridge_slave_1 entered promiscuous mode [ 318.683197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 318.730798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 318.872907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 318.921491] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 319.142719] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 319.150613] team0: Port device team_slave_0 added [ 319.195335] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 319.202896] team0: Port device team_slave_1 added [ 319.248517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 319.255496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.272820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.310441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 319.317302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.335041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.374185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 319.381889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.398662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.437097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 319.444331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.461459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.814334] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.820770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.827445] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.833893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.841498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 320.279967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.861125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.950548] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 321.041644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 321.047784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.055572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.145823] 8021q: adding VLAN 0 to HW filter on device team0 03:33:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000000500000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e11f6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:33:54 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 03:33:54 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x100400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000280)={0x5, 0x3, {0xffffffffffffffff, 0x3, 0x6, 0x2, 0x5}}) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="ff56ab43f49461cdb5aa5b47d849f8c715f641731ef227f2fc4bc9b25e26f6786307e76d25f1382d0e49c7e2f791498b8571505da2160aaffa8f088a81dbedfb42282c9ad9635055bf7fe73ae1c67ac5cff37799246eaa9ee10dd8c995884116fef84ec6e6114ceea63fa0a2ba8e0269347ec8669595f2f23fcf88c094b1f13d4e561deabbfb55070b60b01fd82bf5bdf069de4d33d49aa546fe7857c17d482981daf3"], 0x95) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/226) pipe2$9p(&(0x7f0000000200), 0x4000) bind$bt_hci(r0, &(0x7f0000000240), 0xc) close(r0) 03:33:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 03:33:54 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:54 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 03:33:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839050600f2ffcb0800190005d70000", 0x24) 03:33:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000000500000000000000950000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:54 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x1000040000, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x3, 0x0, @pic={0xcc9, 0x100, 0x14, 0x3, 0x100, 0x1, 0x8, 0x3, 0x7fff, 0x5, 0x1, 0x0, 0x7f, 0x33e4acf8, 0x2, 0x5}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:33:54 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@upd={0xf0, 0x12, 0x20, 0x70bd2b, 0x25dfdbfe, {{'rfc4106(aegis128-aesni)\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0x1000}, {0x8, 0x1, 0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000005) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:54 executing program 3: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 03:33:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839110600f2ffcb0800190005d70000", 0x24) 03:33:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000000500000000000000950000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:54 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x7, 0x200, 0xffffffffffffff22}) close(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) 03:33:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d430100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:33:55 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839011100f2ffcb0800190005d70000", 0x24) 03:33:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0xffffffffffffffdf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000180)={0x3, 0x3}) shmget$private(0x0, 0x2000, 0x54000a80, &(0x7f0000ffe000/0x2000)=nil) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) close(r1) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000080)=""/214) 03:33:55 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28828204}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x408, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xef}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x880) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000200)=""/36) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff3f"], 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000280)="e79af9ce6d6c2bd5401b79b5e783517e8e6fbbd5ceadc41aa8d6bf3c26bffd1d4a6ee4dac392cfb376799a161608b5dda8273548ff44b6bb447913ea0fb841d788066851d3784907c926d8866a7242afd88b52ad248609ce8a50aec32a1f8f52046291f7e9e83ae1010100a6f7ac4c66a176a28774fdecf411b2c88f5446b97c701dd552dff5b2b07d4bd8fc2943cb1c57e846124bc6e371c0b783e174c3274e627f333727dee110dfb7f8b01ad6284fe3dad9c2844b4ca86d9bdec54571e8ba1ea880f30a6d7f39ff82") r4 = getpid() setpriority(0x1, r4, 0x5) bind$bt_hci(r3, &(0x7f0000000240), 0xc) close(r2) 03:33:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c78390106fcf2ffcb0800190005d70000", 0x24) 03:33:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) getgroups(0x3, &(0x7f0000000140)=[0xee00, 0xee01, 0x0]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) mount$9p_xen(&(0x7f0000000040)='/dev/vhci\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1200081, &(0x7f00000001c0)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r3}}], [{@euid_eq={'euid', 0x3d, r4}}, {@obj_role={'obj_role', 0x3d, "7573657270726f6327656d31296e6f6465766c6f6d696d655f747970652d252c3a73797374656d6b657972696e67402370726f63c6"}}]}}) 03:33:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) 03:33:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 322.519281] Unknown ioctl -2145893024 03:33:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c783901060ff2ffcb0800190005d70000", 0x24) [ 322.578337] Unknown ioctl -2145893024 03:33:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0xb, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="016340", @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000500)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0xff4a) 03:33:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:55 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'team0\x00', 0xffffffff}) write$P9_RLERRORu(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0041018678d27be5e10113451ccebc66a32f0fbf12bde5400de84f0c575bc26a745e020000003090c05ebd48139468f4a207c322665c256d499ce2b09d6645b53206bd6d2e15d3fabbb5518c3e0417b1dfd7c5d5d6c7b48511d07570f202e91f2568176a3e7510"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x730, &(0x7f0000000280)=""/253) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r2, 0x3}) fcntl$setpipe(r0, 0x407, 0x200) 03:33:55 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000240)={0xfffffffffffffffc}, 0xfffffe16}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x360, 0x80800) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000004c0)=""/253) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(r1) lseek(r2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000200)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7fff) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:33:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010603f2ffcb0800190005d70000", 0x24) 03:33:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x162c}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0xfffffffffffffffc, 0x7b9}, &(0x7f0000000140)=0x10) clone(0x1a000, &(0x7f0000000180)="79b0097879c2f3", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="308ab9dd8aac58cd824f20b31a3d748f3364c733cb92935cb039097cd62e0ebf235e23414cc5770bf4a86b48c86013dc39d64fa48495d3c6ae3536c7afd7ad05710e80fb583722ea3445f9f3e92464a2b53bbe4937034f") [ 322.832742] binder_alloc: 10505: binder_alloc_buf, no vma 03:33:55 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x8001}) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010660f2ffcb0800190005d70000", 0x24) 03:33:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 322.877944] binder: 10505:10506 transaction failed 29189/-3, size 0-0 line 2970 [ 322.909675] binder: send failed reply for transaction 10 to 10505:10506 03:33:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) [ 323.017241] binder: undelivered TRANSACTION_ERROR: 29190 [ 323.024708] binder: undelivered TRANSACTION_COMPLETE [ 323.046379] binder: undelivered TRANSACTION_ERROR: 29189 03:33:55 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:56 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000140)={0x7, 0x79, 0x2}, 0x7) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) shutdown(r1, 0x1) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240), 0xc) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000280)=""/4096) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x2, 0x4, 0xbb19, 0x2, 0x2}, 0x7, 0x2}) close(r2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x100000001) 03:33:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 03:33:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010602f2ffcb0800190005d70000", 0x24) 03:33:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c2dd561d089403bc32f9668139ff5d"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:56 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) flock(r0, 0x8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000300)=""/68) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000140)="9d7515b0f14c7e381e5ff29f31847fbccef1780b965d010e31ad36b3fc12d6bff7", 0x21}, {&(0x7f0000000200)="1b105793ddb71c3c24ec5d52bb000c347f4771a99eda45b12a5800e7b8a0cddc60b5c38ed332edc763c54be087de2aca547ff851859219a26e2236dbc6002d4225d999bb1076ada82ac0ff766a7968ce968e34580f08880e01ff0127030c005052c65da9b23ab05b984447479796798460c2c70895", 0x75}, {&(0x7f00000003c0)="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", 0xfa}, {&(0x7f00000004c0)="ad45322d0430b6a504804ce551200abdf0b62ed8274e35010fed2c6559583e5270fc781065544ae2c3f752efdd31fd21a783b84bb060104561a230cfdfd81e6d08c9173182486b1973d7e2e2c040143ecfece880a74773b65995551e360d65bb67c9388007880835bc400fa96836b498bf84a91fc7f88edd0b2da482fc1280d22c390cade93096563a826e8e48343da8813f42d7520ddbc6c8d1dc455b181c0f8ee75717a39c205befd31bc4472418", 0xaf}, {&(0x7f0000000180)="d79d31bda45f86be4e6f36cd98da1442d6fa6e", 0x13}, {&(0x7f0000000580)="f448d0ee25793bfe2e51030c1729568ebd2b374484a34e6c3ca496ddee84ee07221bcbf7d94e412aa0a66cbf4fba0bb7ccabb974a45080ac7925cd2e01893f574b09b35e0cfc8b3d9d74a9f879e4b794cfced4cbdda2a69cd79225510f0214352f521206ff1569b4001927390fdbbfc44a918de124364005a9", 0x79}, {&(0x7f0000000600)="4cd8641d46b2f5f72d888b591e64615b78cae00293f737a5a9c9d66040ca4ea2b89a74e1864f3fb13eeca75691433226ec35fcad65c41b6287f7790588f18332fdde48ec007b59fd5df53810e0d6716736e7e05aebd65bf3387dacda3b8634875726110b9bfc5f1d1371c5872fc145b3463245c224d00f6ac3b92c6c6b3b77813e374050583ccb0ffbb445990067b18afbb38e3f4814ff90e5763275e157befadf999170ef61645a9fd680294d737da089d1b17be3bc10", 0xb7}, {&(0x7f0000000700)="217982228575305685da127e55cdef1c087c16eedae6190568d836edb0f37bac393c0f250c16801729d835b65169e79ca89736a1aaeb48c037bae616d5cd6a7199d2fcd30a8f8ac79b35fe77c435c2f76ab5a980b6263f03569170effb63af3838399e5092668b2e6fe482dfdd89c5b487c6166fa275f0ed9c84ceb2b599097d3e18520953977b3717bfa4b8b4f99484182188413c33930d24a98f304b38d57b6240daf707f4b0a2015332ceb81c344cbb7cc62307dbcfcadc6ba0f01b962b782c2d5168414c3b4e680202347a78a07852ecf1155b3e79", 0xd7}], 0x8, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r1) 03:33:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000001300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 03:33:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb540e190005d70000", 0x24) 03:33:56 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/251, 0xfb, 0x7fff}, 0x2161) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:33:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x245, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 323.439880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb800e190005d70000", 0x24) [ 323.569046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb880e190005d70000", 0x24) 03:33:58 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x484100, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1, 0x9}, 0x8) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffaded4e80"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) bind$bt_hci(r2, &(0x7f0000000240), 0xc) close(r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0xc00, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3de}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcc00}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 03:33:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x5e, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000)="12", &(0x7f0000000040)=""/31}, 0x18) 03:33:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:33:58 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) syz_mount_image$xfs(&(0x7f0000000a00)='xfs\x00', &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)={[{@swalloc='swalloc'}]}) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:58 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000140)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 325.727764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcba40e190005d70000", 0x24) 03:33:58 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000109b5c1958e00a1f735434967dbcd902bac76896668744aafb76521358ac16aff0553f36eb5dab145f770f95044d3b50cf94989ef19ffc4348d264fe61edc0d489f93afcee5da33d6ffb497d64406e59f3b3ffdd7e0efa7f82ee2510945309b875c030301917e41642fcf2bd7cfc62bf6aebbdb75e22dcbf8ecd2ac0a609088093b03faf7580d74b35009047c0e49bb3"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3231, 0x4000) close(r0) 03:33:58 executing program 3: io_setup(0x3cd1, &(0x7f0000000000)=0x0) io_destroy(r0) 03:33:58 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="454d85cf3f680a4ac1b27f6b21a84b05000000e78f6a"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@mcast2, 0x51, r2}) bind$bt_hci(r1, &(0x7f0000000240), 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r0) [ 325.911179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 325.926907] XFS (loop4): Invalid superblock magic number 03:33:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb1100190005d70000", 0x24) 03:33:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:33:59 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000100)="6fac1f120e49c8ff16e408961f70610c30447bbd879d1f646857f5d3e7ff6a3688a0d2d228c0544587f7eddd21a071747aa0e923d999a688f45e0528f92d8ffb28aef90e639ce31c801bfa09df02b88cdc6eea137397dacd9ee7526cb19cf88d259d673f99cd8c2b52dfdf3706db5bbb354df6c609168e20e911e2eba87517be501fe0a849c43ef8246c88a3dc6e808df9f7875e67479296c95a7f90c7dd5414aa696f69755dab558914cb4a37d6d1853fb58eac4c6cb849b56cbe3d8d0a8f1ba05c0f3ffe79de23331fd5955cbe7e4d1fc0a94451aa5c0d9bd1555d76c5b3e4c882f707") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:33:59 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) [ 326.109407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:59 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x1) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in6}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) 03:34:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:00 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0300190005d70000", 0x24) 03:34:00 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000140)={0x3b, 0x37, 0x2, {0x0, 0x4c77, 0x3, r2, 0x1d, 'system]security^]!trusted[*#.'}}, 0x3b) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000040)={@local, @remote}, &(0x7f0000000080)=0x8) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:00 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000008600), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56b, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x62) sendmmsg(r0, &(0x7f0000007fc0), 0x5654807, 0x0) 03:34:00 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1c) bind$bt_hci(r1, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'erspan0\x00', {0x2, 0x4e24, @multicast2}}) r2 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast1, @in=@loopback}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000040)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x5, 0xfffffffffffff0f4, r2, 0x150, r3, 0x0, 0x5, 0xfffffffffffffffa}) r4 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x2, 0x82c42) ioctl$sock_SIOCGIFCONF(r4, 0x8910, &(0x7f0000000180)=@buf={0xd3, &(0x7f00000002c0)="911f4502fefe887ed4b37da104e061c8ddf01a608915b16e86fefc48e6ccd29bb92160c05424e63753d4cb74a36d8244898da813386e497f2fc08748ac4d2f3da6a0344b257ca723798ac274a09e3ca2740f66f8238c7acc30356f7f9abc9c57511db71d15131d2ce91bafd16f64b9cf296213405ce938a74eec0ca05376836d5f9cc61184213c0a9bf6f29fdca09286d5bf28605884212a8dda547610cfc2ba1ba36e445a9454bbc0e3f441428020f3f2f068cfe596b0001b062b57c13eac84b5459b2d776e7bf6295e76efaa32a0f3db5315"}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000200)={0x7, 0x9, 0x20, 0x8, 0x0, 0x25f}) close(r0) 03:34:00 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 327.221175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 327.247993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:00 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0c00190005d70000", 0x24) 03:34:00 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000040)=""/54, &(0x7f0000000080)=0x36) close(r0) 03:34:00 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000100)="397b0785cca9898d3854fea605b1c496d13341c6ae0ba2b0c5c2f62b3c8e140d505bc7299d1bee2483817b1984ce4948765571a495e2893a59867a9ab281b4f4b235bea73aa11ddee72e278f9b320d666484f6f39e552093a368ba0a18aba4498ee0c1d029bdb6c5e077506ceecbff690157e6b58d89e62ec2bf18247626069bfa9f67c8a7077b4f11344088669b1a896bbbf5d61ef25f9beec9f9eef9159902d21c9137e8e9eccae88cd06e4e0a8796134895465ec358cd8ff53f697fe9a591b13808dc6dd6086aa48b63ee4ab8285c2072", 0xd2) fcntl$getown(r0, 0x9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) [ 327.415287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:00 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0802190005d70000", 0x24) [ 327.565201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:00 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3f, @loopback, 0x2}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x2ad, @mcast1, 0x5}], 0x78) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:34:00 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x7c, r3, 0x601, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x3, 0x80000001, 0xff}}, 0x28) close(r0) 03:34:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:01 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb08fc190005d70000", 0x24) 03:34:01 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="293d2618c44c8c8e2b52d17b513def029de54b96188f61f95027121845d237ee96ddcfb07af7918939"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:01 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="711b299ae231ea12dbab17cb2438626e6cec46e1745ea1c1557842efd8abbfd254ca374608fdf32cf7f735aecb4bdb3bb9c50e2f043c1616eb16baf92e5d78af559e296eaeee05ff00e81575eb1d2079ec50e272f7599e20410637432c761f3c1c141f97a5a37e5b29a7ae275ae0e994c8efa647cb3ae48e5f46bfc303bac8138a9ab17f85779a2b34cb3a381b8f5c8ca44a", 0x92, 0x3}, {&(0x7f0000000200)="6c9d", 0x2}, {&(0x7f0000000280)="045d242173036f54b93893031de3f4739c3b93c8d214635e50f0815b7675655cdfef034096823d35c4e33cb7c3cdae", 0x2f, 0x3}, {&(0x7f00000002c0)="494e0380abd6582bdfa38a309da8d89987ce954d8c1a26ec39e5930b938876cad870650c088bd1d2082109f310f2b1afa4f83c3d2b471b6de3cce35337fd1f0f955c27314ff381aae5c25dea7756e8db1bdbf2dca25960b3858989df80aa1ad214251ec549fe5941a03dbc02cd5a5daab954d0c411da02c23d365ffa976ca5cbdf77388163b71d8a7b433798ff8140cce2011e5bba527dbb37bb7ce83fac1ece6c5ee8378df6fa72ff84e47d65bd99807c2840aebc1854cae5a72ce8676f646413c09ba9872517f39fede079d613c68f4df8ac0733303b8d787838e1cbfb2add", 0xe0}, {&(0x7f00000003c0)="7903677faebfc9a2f7a99886b64284174f6cca3fe845d3df0c01b66d5efe86dcec0c35a92cf0ad35857ee18e", 0x2c, 0xf5b}], 0x800000, &(0x7f0000000540)={[{@fat=@nfs='nfs'}, {@dots='dots'}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7f}}, {@nodots='nodots'}, {@dots='dots'}], [{@smackfsdef={'smackfsdef'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r1}}, {@appraise='appraise'}]}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000005c0)={0x2, [0x9, 0xff]}, 0x8) close(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:34:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611204000000000061138c0000000000bf200000000000005500000008ffffffad0301000000000095000000000000006916000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff3d43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:34:01 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) clock_gettime(0x0, &(0x7f0000000200)) write$evdev(0xffffffffffffffff, &(0x7f0000000480)=[{{0x77359400}, 0x16, 0x6, 0x7}, {{0x0, 0x2710}, 0x1, 0x2, 0x34}, {{}, 0x14, 0x7, 0x3}, {{}, 0x4, 0xfffffffffffffc03, 0x7}], 0x60) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) r3 = semget$private(0x0, 0x3, 0x8) semctl$IPC_INFO(r3, 0x1, 0x3, &(0x7f00000003c0)=""/154) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) [ 328.668324] FAT-fs (loop2): Unrecognized mount option "smackfsdef=" or missing value [ 328.673727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:01 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0803190005d70000", 0x24) 03:34:01 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) bind$bt_hci(r2, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) [ 328.777343] FAT-fs (loop2): Unrecognized mount option "smackfsdef=" or missing value [ 328.786628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:01 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080f190005d70000", 0x24) 03:34:01 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$BLKRRPART(r0, 0x125f, 0x0) close(r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffa2) 03:34:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003a008193e4050cecdb4cb9040a485e510befccdf7f3e9cf0758ef900e1cf3aebb1cb4c100c0003720000", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) recvmsg$kcm(r0, &(0x7f0000001ac0)={&(0x7f0000000380)=@l2, 0x80, &(0x7f0000001940), 0x0, &(0x7f0000001a00)=""/179, 0xb3}, 0x0) [ 328.977251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:01 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0860190005d70000", 0x24) [ 329.166581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:02 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x0, 0x7ff, 0x2}) close(r0) 03:34:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x200) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x468, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/113, 0x34000}], 0x1, &(0x7f00000002c0)=""/73, 0x49}}], 0x2f8, 0x0, 0x0) 03:34:02 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) accept$nfc_llcp(r1, &(0x7f0000000140), &(0x7f0000000200)=0x60) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:02 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYBLOB="8976c125abf7a042964425f0f6067925d1856e0184e533d915c6a20cb3836932b4380db3e9", @ANYRESHEX=r0, @ANYBLOB="6f0c35c7aa690f15dbd76d6e644d283687c7a89f0344825fd8d375340896843bd87e536d57a19710dd8449565485562212876cdff468aaae4ae9a358013d695b8a710a97a2ea1d49c560dffe14d73cef88ee5a13813640adf99ab26a38f11b96d5032176180cafe4a632e92e180516cf962599a8d16d31d5b80f7b218dce76c63e34f0f9915095174693409b56a5b5d1dc398fb86a35173fefee99ac9e0100fd3b0f7c62ff4b387968eba281238e189b9af53ba892afd318e5f0448821a69f873085a3583d6912c0b095c17cdd8c2c086fd1e7df4f40c1ba09404b9114dd9e2892503b700a4bd3ab9c01e07c5e713602934f662cab5b0f4e822eff05ed3be46755b1dcabd2f2f50f814317268dd966fc33490ef705e1c909ad477c394ddc85aa993ee4321a477b1a5e591441170ab4e0f52bfb0ea4121d7f5089a218c2b26d8eb00882dfdf784d2714088323d52a7e1718a2c6d57d491706b134c44412d473e577ae054eb26e17ba840d6141b8309d22ca063eaeee914491afa15dc6d513bdbd52e25212ac38ecdf9482b272cb26552d08c34b40655c8f7e5c1a734d9d0c1214d062167bc59fdf43309c231f2a80906d22ece7580d86cd49f0929554ddb9913b175fd2353d2cd41ac1f21bb4aef8637701b4b1970d65ac666bc9ae316ecc2baed55b8cd3ce905ae68bd595fe8e916dd74cca70e31e54161776849da0ffac7f12174fa9316bb7ac771b3f78353f6863de39dbe724b49f9298204e7caa16591defc8a5b682d56cb20b342fc5fdb0441fe2645f646da8db6c2712ff9caa863cfbabe66e51cd941314a2658362b8df64bf2011193a3718ed2c36e190dc08b90c4ced234d6a703e8c5ef2dd1fa229913a0bfaac1f4e089334cdef8ef94169d83d6b76a11d73955086a12215f9f7b14c2c36d045bec2467b57e737c938dab4b03481df9e135aed2a83a554de3b198724d9fc9b032a7597b2064dd8dee3075b11461665704362ff65bd6a747bd9c0ae5af3882861b008a4a26e018d2a3d13a98225bfa2acf1ad43e7a37cf3f9ac6504d6249e07e76413f709e6d04ad4248233ff8e8fa8e7c92c6f2e57ce7e031905c02e1847190852f73be03fcf92685fc89adbdeef9463dc33248ec760422ee2cb5a3742618cc1af8406c39627bb4c7fc1dada4e6db1329fd06fb97c870929f27bfa1cbd3e8efb4d9bfc28a36296d1648850f4c4cc15d2eec40d290dfcae79f8b76ae220087f3732446f5107950b395958f00516e5a438905269500f4f2c48a23b58738c1d61a29c2c18a86d05f2acb812ba64b9bae6d9c89da1bfc87ffb404c5cafde2e4b998265e8d73741895789a3802b5c97bf734a08792806cac0d1e63f25c08cae69e06baff25191a94f1915d9a096c117b1da0ab3c2b5dc8f4d960fdcb0decfd752c865f731139f7721d80d6cf90210e9396e6afee0d996e82900e7f844acb48ffbb294ce223af6fba0be11986de379c0535e78db873467b5599184831376923f56f0481474418a3b2dcc0cdc133a2662f036e74d8353961e7cb290e17d4f6b4726b97ca383efc3d094fe8dc6927ba69bcf55dda47e06b3d51b7ed5499ac7b857a205f0b91378adbba61dfdf6a3cec3ff10d024edb51adc0313c93bff57083524f949049cfefb45bd36612ce44dc1956e3804d0f369c12cbc106a750f71f11f23daccff13ffb68eecfe608c1c5516bb2a1b6fe7ecd52763953366762ccd116667926c9398110d5dd4b94ecb28a9fdfdf7250afedf4442d732cb64130d8aecc3f7e8f699ccfa3e0cc4c717cfe990601251b7f1dbbfe55c9645cc001427f31edc0d843c99e09693dfe4c108e4ef5455f3caf56cf6f7ce87f8606f1c97d246c7d602e8b40e817f2aa2694383cf972c969b52e102e2f6575ce4062e267871e0ea5ec46ad89bfb448d39676851d712157dddfbf00d82a913b146924f97179386c193eeb5d8a8d5e05f46836783de9ee476a6a8ec05e224dea1400dfed5ffc950da10258cd180a9f478b003bf5f49fcd93157a2d62ce9d40bb877ccc65f54a8df697ed3fd34526bef92648e52e1cffe5f65b5eb38acbbc32028c38b9b785943873736c3aa53a12c5b272ef9a16dc0ce1cd2284b0ccafde502621cad0101f106811d8a1b59c8a62af7ecb0dd25771d25c8efa57eddc1bf376db9068cbf07632b996f8e5eeb3956c4971c9e209c55a4945250b69c80ce4512089c5da0b6a74809afe0045cab611ce8485f30477a85f5376908df88ddf268d1365cb9f00052607f76fb6eee1a46fa140af7d305de3c937274f1d39832d4d77bd5db75636850491bbfc90dd9ae85dca5e309ade650603084760081e74d2eb32f0948159f15ec06f21477b5fc98341a566568dc6dd90ab11303773d015c741f03fc8b962db65041c74c45797e5c52cf6cc3cf880bcb5426e62386054e29dad8d172a3687f0c282b69c518bd57f12966ce3ccde46aa9986ffd114a374794cf415746382b42c3dc6d17d752f721951067fbe0471f530e2de63ec8168cc21f29bb10eb23a9c0489a878e16e712804addd5beedfca605ec4c24b8425499aaced2262cebfbb1d186138271a5b9b748081467571f667016ef81d0f106add82966a940602b2092fcac8d9380242c00c77f76be620f43208007cf3cf1df894d25dff506df70a03ca006f363879051fe58d4cbb56d0eb4bf366b4c3f9d70b2940246a47caa2cdc691d03e833774c4d02699c5caf3359acb25823e4833388b0c997ff7b2b72b2496e0b94527c92fe623ba7daf770649135f2ff7e8d6357452941698bdffbe31e0961d8a3e2e7aca7b774ba26d1afb931b827cf03eac610e06cc0a95dd34d44707cdbe23fa961bfd8226fc418147835cff73ceaa20cd947492ef4ce4e7ee573b45814e5b363d6c5a846ea89f67194aba250b2fba21798e6f4ccd34b2c06a0f5e7b187417e4690abf0791844fe70fe825319f4533f47e29e44cd05c41305fa69b93c137118e088520f90c831f10dd4384ddbfdb774cab35b6fcaaade883ead2c1b16cfe0876bfbd6606ee8385f36b99efb0ec0d9f6aa87b5d747ed7f271adebe096c5576deb455ef7d740f3f63628dc50a5d24e4a3f8209c802bd5df5c042de58f139cb2ab8464fa2ff69ee3def98f3569864f4d4728c4f084d2fa6e7cb172453f06995a4fc8a822205202efef6784dfecccf0b238d4675ead299ec1e9da01b90246583cbc09dcdb87956959de772ab3ad4deab5edf1bd64361524cc38381874c06624f23ae3d4258dc2ac50211eeba9433d64df3ad949f94cad951464cf42064f0ad0bf24ce815effb123c47593d5dcc3cc1b30daed43a2f528c0ac133fc744ba7e5cb730ad5eb9f03cef9ad57a01dab1d98f229ffe1f50689c53e75aad1dc05cf69c4552fb59c943824af5bb5efd9b28c21bbc2cab233d2afa19b60a8562a499ade047ec781b2d6f8f8ff5938f71fe247a8244f7afa55c9c569e76e9a4c2b8e59d5ad072377944c980f254561b663d28af94a482e77543837c1c7ed8e4d800d6a6275540aaaf5541822bce3a311e81faff3d05a68f6619d5b55548946c12b0bc56eaf39a6c4bb3abaf933a1d980d5b65b49e7c213f3c658b502d68d409eaddfd1c587e076984bbc672bdfec3a99ca9aab366a3809e3a194fce2c38301c0109b3a41507c12186f1b0c168bce5148973bf76dad3a9ebde61cbbf5a8198c3d745599fae5bda3bad1cc465ecd9c18b75973cf669fec409f4a8e8e50a3e18baeeb533c5bf428575c4c79753264a59ef59c0110ef23e5ceae24d9517ce76fc5b54e54cb0039a02bc5614b7433e17270807b6be8d01208ece1760fb7453a2fa8df92b3b38eb9a257f01b5ed65879083bedc1094e354ce9b2592e80e745f7b9304478254f8901b0f7ebed5b26bb47cb49283d40e977f1d00c860879c2e0252e918ef27ed4f751cb9fc7fe48de5f4b9ab21311d0de03a8decba09cbde818fef3e4b7e9c6e02664a00853a6c5c2a340b61643f54644c69a0a6cc5a088ec1e039af36eedcb0440db56c29c05b6b52be1ba0b4fcedd6a3564edb2880331a4f835196e7cd8bba17b396dd86c765f7341939f9c376859343559c4c97a0e431e9312511d90035fd61e9a4e1982f826a95362b5c036431f297a4f91bcf6f10752c678a199cf6a8cbe1cd170cde49e1ffb9db4309d13818b167e1dd87465f4c3c78f05157ee4dc2341a4531cded88089cea0e291dfb68aa05ca5b8b9944d06a51404de23da17e39073028a6caf4efd66b586a1ad9909f704470b4bcc733bbe9cfcc22be0217371c82efde6b951bf5cf172b2395e15b1714a170936dcb5f581c3a2c5bde5d6dda17ba67b1adc465ffd24cd1d6e60aa489a74c03a6e93175c9bde879a80df03a6415fa8ba2a94b56219b8bb98f1b6aceb8e8dbed49b445d2429610c09a5287b365b844c097f1ba27db2be3ad89a1eaa342333f5993d4d61aec52b6249cee43e3a173a1ebc15d05d0526756eee7f4ceae83abe9630469421cb17f5096cd66485d0d17d6079f651ba2c020d1dee84d9ea310b51fa6b57703ea3f14a1593a7406e11691b760c3bb19356224b22951b1ddcc858ab89e19093bc29570eda72827e40bb19b6fc40de0015d0c67bd778aa6d297629048f96e8591ad4185ed39cf66762e76eb21470ab6791e47732c0de449c70acdf5aa830f6d3aac7cf0446ace1e23da87524c8d0bb9edcd144581c1bcdf9c3a7e6efa0e364cd3574e0e47ab4d69ea5226dd9fdc1eb567ef4a7c299cf55d9f730f72ad79a9a272acddbdca8d0c78335af5a537510a02b0c4b6d07b05794673b9d072997f4e83acc3f2baad739dc8ec6840b135a6a3935a1086487dea2ffd52823705c00a8c68295fd9e1283728972bbc8a33eff619719203771cd10eb26d1b454be4ba2d557b8e9bd5db6f54307e346c2ecacdd23c92feca503648ba9333377d66a9d50dfc1052ba19940de34e638bde0283eba143fba16a44ff0524d3852b483da33313bd29b0706e81932502a443c8402d7115117a63db8e403fc97dd937af462753022592fdd86b84eb1d5f3b3815cc0210efb5dd5ac3b418db5294eb1a8b858c1ca719a4fdbd376686cea4fa811b73859e23b50140c32eb966b1c527fa89c26b4d5399e6e823d819484c5bf774d68f91628be53ebe677cf4e9ee23eed34b6e9716cbbed66109e0f0fcd7e3d7b34dd18ada4b2c13e9ab963e8b8359a76d760f8cb4db8fd50823ce6ec125f81f38b698319163b4d7bf4bfb649ab8529365e3a5662138aa5f43d49987dd6c61392080fe8fa4521e10a269c7b889f8f51a22779f6d2460a713acea1c065ae5a8d617d8f10895976a02e0a5217083f4d81d120e89ebe7f00b851753e99596d38b1be3385f14abd279d9cb709040607c73a147537e5fd4278d1465a2f02f9a7a3d84ba4e41fd8816be3ec75ffc1dad3ccf3d08bd9f85a029f9f09ff034a2bf047a78f7cb27f4502a881a020a24f5de11757691e3abbb7f0ca847ae82481bf336183c557075e4b358091305309605272d96230141cc3a1571f820eb3b58c05fb70c46c95a9dbb252184aba3754e62b2b8b6801232bccb991197ff6b37badde9d8ed44f99454ae69d391f7c553a0f80bb6839793472945ab3a0626839d09c5f1a63186ed5b89ddb72b3b5b24faa5158d57b2d4f2f1f3970ef3d5cbd49524742b26c1e2836328d414c7f4022433329af18ae2fa594edeb11222ff9362ba864aa8ab8c04da9c4179e200619d898e70bba34841a6612e1c1a41014e0774a04cff9590faa80d76", @ANYPTR64], 0x1047) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:34:02 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb08001d0005d70000", 0x24) [ 330.064617] netlink: 'syz-executor5': attribute type 29 has an invalid length. 03:34:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb08001d0005d70000", 0x24) 03:34:03 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:34:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:03 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:03 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) timer_create(0x1, &(0x7f0000000140)={0x0, 0x7, 0x0, @tid=r3}, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) [ 330.306811] netlink: 'syz-executor5': attribute type 29 has an invalid length. 03:34:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190011d70000", 0x24) 03:34:03 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x188013, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:34:03 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="537bf2e583ff9266240bd19e80b686ed6518d9c4022c9505780fd130ce77ac54d5fc3526796f134cc489b79bb8de0b3895bc3dc71bde5bb9ecdb290046340d789bcf020bad00e91f1bb402cad2fce9cd964f7f133e86e3f4074f4e0707f4525f36473f7c19ee54a8bf753a873ab56e5e6dae0afca7c54d4f196ccfe4649aa9f213702640038f6ba9081d2ff07836a1bed47c1dc81dcce0ae6fe24e8ac6e2025eaea38fa2ab09dcc094240f0f24deaacd9b23e07f9da9784db1674d83839a0057e3cbefaf15ce77ab7f5841b8d4ad9071e8bfb9ca41448ec32f5f9196ba1a2d6f41dd882a1868132d11a22ee5fd0fec2bce144416fa81ec"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local, r2}, 0xc) setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f00000000c0)=0xe6fa, 0x4) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000380)="4da25354fc2c184ac96e3cc3f8ca0f3104b6b51b6b7fc60705b3422a4a98c596d80804071bf8ad4aebc8fa91f67603bc7aa77c19c1326a4d05f4cfe84890ce6eb33b1b0949ab4c13b72c43c9e7ffa5f8332af57c54bdd1109d2849402ab874970c001d0319f1876a45fade810ba05fb55c8dc66a448091553f269385c9c4cd294d225062e19f30e7bd9dc0c5cb34c208aeaab875959ce0d297d262cc7ec6496f3d0891de8d0656baafd1a57ecf94f83cc4c45f6a828aa8e65bcfabd0a8865efd09978fc2f731d2e471", 0xc9, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r3, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, r4) sendmmsg$nfc_llcp(r0, &(0x7f0000000ec0)=[{&(0x7f0000000500)={0x27, 0x1, 0x0, 0x7, 0x5, 0x5, "9670a109237295a7934a5250309c7d3aaa8f1a82f799c52adcfeeaa1a9a685bea2e51262c48cfdbd8b7c7bcb4bd84b906d875f493a1a49575cdd92f86bd7d3", 0x20}, 0x60, &(0x7f0000000d80)=[{&(0x7f0000000580)="5d2b3bb061366ce0a033f74113d7904b0fcbef0003bf1ebac50d1d08ee956705aa94ce5f96dfc89d7ea3ad741e6c8d9e87aa8a1850fe9ea6c799678b188367747e8f1c103f8ff342bd13665cea70518c6cf90a142fc42b36cc9ac34aaf43681e124f254d84e9568aeb7257d98447f32119a7b4a1a1ff6d07518683a3512e19eb9eff95009539b3967a30bf65c063b9b069674987e6268d113e8a3634b8a9c9d3f33839bf5abf0ae3e1aba986c18b92885f75053936045fa940522bbade10ccf06f5d96073c8ec1c59bd2d36551e2b05cf2538a", 0xd3}, {&(0x7f0000000680)="4f1865688cb57e62995a781564bb8010cd3e653c76dabfedde7ba630c1ae947613f6d7aab4618f252b344cbfd400009fad500cb9eb28b773bd48897896bb76683b1f22ca7d8f06a9af995016e7e7ad4daae6b55604940bab0f0f81c35601c9e4e5bc6d67eb3d428c20c9b991f3366464b5cae99181663011b79169fae3dae1502d1b8bfd3d1ed1827c52a9", 0x8b}, {&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="44114d30cd4f833e50f561ce8c1d987116bbba54cf33325794f9116b4a8bb4db2a85a778a620cbe45a88344c1cc1fc93d9526f2f83a52fa26a3bccce5b53c024d4c0d5aa8e985fa499f700bb0dbc4c5c241309d7a2f87b08090f961380dd58ab3fadbecb064ce68bd877d8e1aed1ccc30d357922c7ec14dc7c3b3c4e004997d689b28a9d94722e98dcee595874c61b539065c1bb4f99448a4a1a17c6b87312dc9c05c15b64e3b4e99575", 0xaa}, {&(0x7f0000000900)="b7e3eab8cd5efccae9380950db7984d00945d86ef9316744a39707b2622366b741709509cc9aa9519b449d73bc274bc36ea490559a9afe15abe88ed37def021d8ba87be83a9c1f06cb8c184e6c4609d04b758d7ae7c7964064a970f037dd0a6e8d536021ad4d6d5397cd1245f9a5fb1ea205801f6466a00a2637c6623f0920", 0x7f}, {&(0x7f0000000980)="b5a50f6b63e50d0b0827e6a9fe05adb432f73e083918152696d27bf25e3756379b0524eef1368cd57d751c7353657dcf49f9be1d2fecf09edfb26faf8df8fd71fe8919d53ce977880133850cef53295a209596f185eade3dcc42d61800f214dec8b8f1820f97dc21b5470b8e1c9bbcbb6a31313b1f730df210b83f88a5fa162dd644dd209bea1637e4ce540ac2d4a2231af6d343c48c0415442cb23dc286a6fdbdae761372d677be23a65b6c823884ebafc9b3dda9b6a72eb6ec66816224e0b0ea47cd1dd209797fd293089d32e1ce0d717a3bc4332c543d56c4e3cef3b8a17ee0", 0xe1}, {&(0x7f0000000a80)="985ae2c528e4f9fccbf0753f95abb29980263b8c27a03645fe3bf4778f4ddf14d512bd3ac7d6eab66408b961a53ece3e8b3b9ccc5324fb6b349f9227fd4c3d73b3f7604eeab69460071bdd007cac5355bb40b9cb2673d7eaff71fdefe605b312ec621f4732d9c3daf918acd89b8430917b5cb45ce28a68d228b050bd347205c5752a1a81a7070fa47454b238b3898d9c11", 0x91}, {&(0x7f0000000b40)="baac48c79bd8e719df7d3b09dd18ee15fc1f4e52088253c16d8303a826e8d0a20f5ba736b894a16631506ff60bb0a0e1918068003d0c1d7c866f3914a7e5050f9a1100b4e14853d87c158a6f2d42fb3178d1032d3ad636bc4cef082881b5bd6214472bc51ce9c5b9c53fd8378f1d645e8e323e689ffcfd79edda2e83d53bf1e978", 0x81}, {&(0x7f0000000c00)="b40d610b4962455bea1b6ad900e3c881086cdf84cc2ae7de2a81fb4b0e44c5edd4efb1354ae0dbee4457c7b41bc06b053c80141fa1e514d4b318a0d13e21939fce946f3d2229f9c1a8530dcc112018d208a2767d0e4a6b531c129ae5aa71e2e4", 0x60}, {&(0x7f0000000c80)="627eabef94778968bd83c93366d7d56582b5737a3fde8a51b05323fa6ddcca8b4d3ed7777ed29e7d73f6d6209b2c19a830129d9b6af6cdb6cec76bcedb4b05f3514a87583f919e70d2d695689689e2efc1fbc741f4e1eaee6d23689868f351ebe63478f248ab8406ba57a6a01c4f9d03be09ad50aae23a350be9b859a92750030c012910a41397eda1306951ed9abf0ddfaf99839dc39432a98a416f00ee45f9bb2863eda15a4cfa1590d3f7899838f811d4fd40ef12914921c666652ba5e81dc9cc9a47bae7a300cdde17e1f8cea2fd23af85a50f1a99941e79ff8e5ebddefef51dbd76ac2f96dec8b5381e5f9043d405e9d4c279e7e4df35", 0xf9}], 0xa, &(0x7f0000000e40)={0x60, 0x115, 0x1000, "62bb952847ec80689fa14ce97bcf1356bbe17f3468056afd62cff3e62d363fd83b67e8830189b9cb07fa922c33bf8c69a4e7cec11f0c2a088e36c5b087cd1515e8a78b45c7f3f8de8fd67b18"}, 0x60, 0x8000}], 0x1, 0x4000000) close(r0) 03:34:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190305d70000", 0x24) 03:34:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190f05d70000", 0x24) 03:34:03 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1000000003, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x40000, 0x800000000000, 0x0, 0x1000000000000, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a", 0x10}, 0x60) r2 = dup3(r0, r1, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @dev}, &(0x7f0000000100)=0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, r4, 0x1}, 0xfffffffffffffe09) close(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) 03:34:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:03 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10b402, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800196005d70000", 0x24) 03:34:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:03 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/227) 03:34:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x800000000000004) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:03 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000001c0)={r1, 0x0, 0xffffffffffffffee, 0x100, 0x1}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x6, 0x100, 0x100, 0x0, 0xcf2, 0x2, 0x8, 0xf35b, 0x80000000, 0x3, 0xfffffffffffffffd, 0xcc14, 0xee29, 0x80000000, 0x8, 0x2, 0x1, 0x10000, 0x2, 0x0, 0xffffffffffff0dad, 0x60000000000, 0x1, 0x5, 0x9a, 0x7, 0x5600f4b4, 0x8, 0xa41c, 0x88, 0x7fff, 0x2ca, 0x81, 0x2cfb, 0x7ff, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x1f}, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x29, 0xfff, 0x6}, r2, 0x6, r0, 0x2) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @remote}}}, 0x90) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 03:34:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190205d70000", 0x24) [ 331.127918] kobject_add_internal failed for hci1 (error: -2 parent: bluetooth) [ 331.166742] Bluetooth: Can't register HCI device 03:34:04 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:04 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x4d564e586fd0e23, &(0x7f0000000100)={@rand_addr, @dev, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@deltclass={0x108, 0x29, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, r1, {0xd, 0xffe6}, {0xffe0, 0xffff}, {0xf, 0x3}}, [@TCA_RATE={0x8, 0x5, {0x85f, 0x2}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x81}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfffffffffffeffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x79d}]}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x44, 0x2, [@TCA_ATM_HDR={0x38, 0x3, "5944a909c9e7c7c17025319ca69e023b3b9c5596671c3e50959cb904aa6ce846e05e67f4617dc673520ed16489814216e2ad"}, @TCA_ATM_FD={0x8, 0x1, r0}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x2}}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3ff}}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x24, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xd1f7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}]}}]}, 0x108}}, 0x4000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'memory'}]}, 0x8) close(r0) 03:34:04 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019fc05d70000", 0x24) 03:34:04 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb08001900feffffff", 0x24) 03:34:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:04 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) munlockall() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(r0, 0x0, &(0x7f0000000380), 0x807ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1d, 0x2, @thr={&(0x7f00000003c0)="5ce46b53e1b0ee5d16cd1d298962ee283a56909b70fde2daa9b298c302ab973e2bb704a8b2791cb4109966db0af2d4c221637cac7ea7bcfe7e6a3c7677986b21847f5e02069a2ede9da1c95b2065f1d9ccc861b940547f9d96403a0a97bbf15bcacec381be97a496", &(0x7f0000000440)="7651b2c67defa0757d66aaf247e4b7e60424bfa85f4a1128d048bb1b43ee22726d277e1fe41ea567cc2aff2b9b03bcd1de9f5cce26281e09ff1c9a0a278e4561fc47d41f554600114b141315a1b2d291adc7cf6e8cd2316ca141a3b0d1f7b49318398837b91fe9d47d35d943023cbffd773f478fcbbae8011cd7170c3f25cc1c894b8d1cee4625393fc4b2465c61178618857b0524e9eef12c9c3978e58ecc63fc15c029f12ecfe1c6"}}, &(0x7f0000000500)=0x0) timer_settime(r3, 0x2, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f0000000540)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:04 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0xc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x9, 0x6}, {0x400, 0x40}, {0x3ff, 0x80000001}, {0xfffffffffffffe01, 0x2}]}) close(r0) 03:34:04 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="ef804f1d672f30ada652bedf18"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client='access=client'}, {@msize={'msize', 0x3d, 0x4}}, {@msize={'msize', 0x3d, 0x1}}, {@version_9p2000='version=9p2000'}, {@nodevmap='nodevmap'}, {@cachetag={'cachetag', 0x3d, '/dev/vhci\x00'}}, {@posixacl='posixacl'}, {@access_client='access=client'}], [{@euid_lt={'euid<', r2}}, {@obj_type={'obj_type', 0x3d, '-++)'}}, {@obj_role={'obj_role', 0x3d, '/dev/vhci\x00'}}, {@seclabel='seclabel'}, {@hash='hash'}, {@obj_role={'obj_role'}}, {@fsname={'fsname', 0x3d, '/dev/vhci\x00'}}, {@hash='hash'}]}}) close(r0) 03:34:04 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190011d70000", 0x24) 03:34:05 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="ff808471e91a8a9e48e4c89a46d710175dfb885195f9f7ed31f353d586cc587ac400a1cac2830700d8a119cd9967fac05a8a6f0cceed5b5c3bc510905e03027e1c91a53f66ab5c5597ad406a4270acbfb96fa0e8d748f3c876e840e7a26e15fcb8863a9a569d68c880d7afaefb789f179cf91456671fcc5cf8e84462d5fdb61092656e29ed71fc2105711471793dd1992cc25b35fef8f3f7f81daa22198d19b33bc7add675d6aa1a22770a4ea86618ad7a4b73bbf005e8a793ca79d6605d47377e67f876beef730b5ce62580c960288264c0b8"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d700f0", 0x24) 03:34:05 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r1) close(r1) 03:34:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x800000000000004) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:05 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x1, {0xa, 0x4e23, 0x4, @loopback, 0x80000001}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000240)={0x11, 0xde, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @local}}, [0x43000, 0x7, 0xcd48, 0x200, 0xd1a, 0x0, 0x7, 0x7, 0x43c, 0x6, 0x8, 0x80, 0x20, 0x66f, 0x7]}, &(0x7f00000004c0)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={r4, 0x2, 0x800, 0x2, 0x82, 0x6}, &(0x7f0000000540)=0x14) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:05 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/88, 0x58}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x4) close(r0) 03:34:05 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000400)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="7cc3116146a2e2c1084f45afa2d811bce0a8cf50144ff9f6b5038d9530239228336de4d346cb39cf18db899763b90d229ac31e4e7f52a804a20d2bb9e65fdaa5cc1ff89743e585ad9f36017678ac650006ba9a5a450f1e727ab2e32ea22a", @ANYBLOB="e53e245274a76dc56235d5a1e2c55173faf4775ca0b023191c1cda298387164f5002a1654eda1e614bfc0b7123453fdd5a32d7450f4e875be4fbf723edf659b9d5bf8a05f8d83707fca8d2def29d0b7918b07af383e74ec70ae487660ff2a1028c77461afa8c979c9c49c4b826d2c0a4e2cd4270", @ANYRES64=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYPTR64, @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=r0], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="988f81e1ae78a2cccb86d6fd6b2368ca6e76033fa7fef8e4bed2bbd012ee90f5aaa2ea", @ANYRES16=r0, @ANYRES16=r0, @ANYPTR64, @ANYRESDEC=r0, @ANYPTR64, @ANYBLOB="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", @ANYRES64=r0, @ANYRESHEX=r0], @ANYRES64=r0, @ANYRES16, @ANYRES16, @ANYRES16=r0, @ANYRESHEX=0x0], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="c63d72cbd384fda38ae3e9b7f555b8e5dce127ab884f93f95b28f095c4a9ad97d7455af6b64eac95", @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0]], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESDEC], @ANYRESOCT=r0, @ANYBLOB="826b1c8b4cb2a605b216fe022b5a6fa5367f1dd1", @ANYRES32=r0], 0x4f) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7c0fe", 0x24) 03:34:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70400", 0x24) 03:34:05 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r3 = dup3(r1, r2, 0x80000) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000440)=0x0) io_cancel(r4, 0xfffffffffffffffd, &(0x7f0000000180)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000400)=0x7) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) close(r0) 03:34:05 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000180)={0x16, 0x2, 0x8, 0xc3, &(0x7f0000000100)=[{}, {}]}) 03:34:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 03:34:05 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'yam0\x00', &(0x7f0000000280)=@ethtool_per_queue_op={0x4b, 0x0, [0x6, 0x1, 0xc64, 0x9, 0x7, 0xbd, 0x40a9, 0xfffffffffffffff8, 0xfffffffffffffff8, 0xff, 0xfffffffffffffff9, 0x9, 0x0, 0x5, 0x401, 0x4, 0xffff, 0x100, 0x101, 0xf594, 0x3, 0x0, 0x6, 0x1, 0x9, 0x6, 0x4, 0x0, 0x84d, 0x5902, 0x3, 0xfffffffffffffff9, 0x2, 0x2e, 0xf0ba, 0x2efc0000000, 0x2, 0x3f, 0xab2c, 0x2, 0x9, 0xfa, 0x7, 0x40, 0x3, 0x8, 0x7, 0xbe2, 0x0, 0x4, 0x6, 0x7, 0x7, 0x1415ab2d, 0x1e000000000, 0x873, 0x0, 0x4, 0x7, 0x0, 0x0, 0x9f, 0x4, 0xfff, 0x5, 0x4, 0x5, 0x7fff, 0x7f, 0xa2, 0x401, 0x3, 0x3f, 0x5, 0x20, 0x8, 0x8, 0x4, 0x9, 0x1, 0x8, 0x80000001, 0x0, 0x351, 0x9, 0x4, 0x300, 0x10001, 0x1ff, 0x3ff, 0xff, 0x9, 0xe7, 0x59de, 0x9, 0xff, 0x1, 0x7, 0x401, 0x6, 0x6, 0x4, 0x80, 0x7, 0x368, 0x1ff, 0x9, 0x5, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x0, 0x737d, 0x3fffffffc000000, 0x2, 0x3c4, 0x3, 0xfa, 0x1, 0x6, 0x5, 0x9, 0x0, 0x902, 0x8, 0x80000000, 0x31, 0x5b94, 0x3f, 0x7ff, 0x7, 0x200, 0x401, 0x401, 0x81, 0x100000001, 0x7, 0x5, 0xfff, 0x1ff, 0x401, 0x20, 0x8ea, 0x4, 0xff, 0x8, 0x4, 0x2, 0x7, 0x6, 0x4, 0x3ff, 0x2, 0x4, 0x5, 0x247, 0x80000001, 0x8, 0x200, 0x101, 0x1, 0x8000, 0x8, 0x7ff, 0x8, 0x8, 0x6, 0xe065, 0xd2, 0xfffffffffffffffe, 0xffff, 0x401, 0x80, 0x9, 0x0, 0x2, 0x6, 0x8000, 0xffff, 0x61, 0x1ff, 0x200, 0x3, 0x3ff, 0x2, 0x2, 0x6, 0x0, 0x1000, 0x3, 0x4, 0x9, 0x7ff, 0x0, 0x7fff, 0x4, 0x100, 0x8, 0x1f, 0x80, 0x100000000, 0x6, 0x1, 0x0, 0x7f, 0x0, 0x8, 0x9, 0x4, 0x9, 0x7, 0xfffffffffffffffa, 0x1f, 0x80, 0x2, 0x40, 0x0, 0x3, 0x1, 0x7ff, 0x5, 0xfffffffffffffff8, 0x2, 0xffff, 0x8, 0x1, 0x80, 0x0, 0x0, 0xff, 0x10001, 0x1000, 0xc6a, 0x1, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40, 0x1f, 0x410, 0x3, 0x100000000, 0xfffffffffffffff9, 0x1, 0x3, 0x2dc9, 0x7, 0x4, 0x658e, 0x401, 0x6, 0x1, 0x100, 0x1, 0x9, 0x6, 0x100000001, 0x2, 0x3, 0xfffffffffffffffb, 0xd5, 0x3, 0x3, 0x20, 0x8, 0x10001, 0x8, 0x9, 0x6, 0x1, 0x4, 0x8, 0x0, 0xc9, 0x5, 0x0, 0x900, 0x7, 0x533e, 0x14e, 0x1, 0x7, 0x0, 0x1, 0xb1, 0x0, 0x6, 0x9, 0x9, 0x4, 0x9, 0x0, 0x80000001, 0x2, 0x3, 0x400, 0x1, 0x4, 0x4, 0x100000000, 0x0, 0x7, 0x7, 0x1, 0x100000001, 0x40, 0x1f, 0x3ff, 0x1, 0x3, 0x8, 0x7, 0x2, 0x101, 0x3, 0x2, 0x1, 0x7, 0x40, 0x9, 0x1, 0x9, 0x3, 0xff, 0x7fffffff, 0x2, 0x1, 0x40, 0x41, 0x5, 0x4, 0x0, 0x20, 0x5, 0x0, 0x8, 0x800, 0x8, 0x1000, 0x40, 0x8, 0x400, 0x1, 0x2, 0x0, 0x1, 0x7, 0xe9d9, 0x8, 0x2e1, 0x10001, 0x5, 0x7, 0xbde2, 0x8, 0x1, 0xbc, 0x294, 0x1, 0x1, 0x3, 0x6, 0x6, 0x1475, 0x1f, 0xffffffff80000001, 0x401, 0x7f, 0xfff, 0x6, 0x6700000000000000, 0x2, 0x7, 0x6, 0x5, 0x2cb7, 0x20, 0x8001, 0x47, 0x1, 0x6fe, 0x80000001, 0x100, 0x1, 0x1ff, 0x4, 0x100000000, 0x2, 0x383bb309, 0x5b, 0x1010000, 0x0, 0x8001, 0x1, 0x80000000, 0x3af2, 0x0, 0x6, 0xcf5, 0x6, 0xfffffffffffffe00, 0x2, 0x516, 0x8e, 0x90, 0x60893153, 0x2, 0xffffffffffff8001, 0x9, 0x1000, 0x5, 0x7, 0x5, 0x2008, 0x7, 0x7, 0x101, 0x8, 0x800, 0x2, 0x3, 0xe668, 0x76, 0x7, 0x9, 0x3, 0x6, 0xbf40, 0x7, 0x7, 0x5c, 0x0, 0x10f, 0x6, 0x3ff, 0xffffffffffffffe0, 0x5, 0x5, 0x80000000, 0xfffffffffffffff8, 0x58f63178, 0x5, 0x3, 0x2, 0x100000000, 0x3, 0xfffffffffffffff7, 0xf7d, 0x5, 0xae1d, 0x1, 0x0, 0x9, 0x6, 0x15, 0xfff, 0x6, 0x100000001, 0x5, 0x0, 0x26, 0x6, 0x4376, 0x401, 0x7000000, 0x3, 0x8001, 0x7, 0x7f53, 0x81, 0xffffffffffffff7f, 0x10001, 0x7, 0x5, 0x3f, 0xd812, 0x800, 0x20, 0x2, 0x80, 0x200, 0x5, 0x3f, 0x2, 0xffffffffffff1b51, 0x100000001, 0x4f70, 0x800, 0x624, 0x3, 0x1, 0x80000001, 0x1, 0x3, 0x5, 0x9de3, 0x2eef, 0x6, 0x7, 0x9, 0x560, 0x4, 0x800, 0x80, 0x2, 0x8, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffb, 0x5, 0x7, 0x5e6, 0x400, 0x3f, 0x9, 0x4, 0x4, 0x81, 0x1d4d, 0x0, 0xfffffffffffffffc, 0x9, 0x3, 0xfffffffffffffc01, 0x63, 0xfffffffffffffffa, 0x3, 0x95ee, 0x0, 0x9, 0x9, 0x46, 0x1, 0x1ff, 0x8196, 0x3f, 0x100000000, 0xd1b, 0x9, 0x100000000, 0x80000001, 0x24351c7b, 0x1, 0xdd0, 0x6, 0x80000000000, 0x2, 0x20, 0xe3d, 0x7f, 0x4, 0x0, 0x5de4, 0x20, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x9, 0x7, 0x3, 0xfc99, 0x401, 0xb886, 0x1, 0x1, 0x7, 0x9, 0xecc, 0x80000000, 0x200, 0x5, 0x2, 0x3, 0x8, 0xc16, 0x7, 0x7f, 0x7, 0x401, 0x8e, 0x800, 0x80, 0x1f, 0x200, 0x1, 0x2, 0x8, 0x9, 0x1ff, 0x9, 0x4, 0x1, 0x2, 0xb577, 0x4, 0x3, 0x99, 0x2, 0x7, 0x7, 0xfffffffffffff000, 0x2, 0x8, 0x3, 0x8001, 0x3, 0xffffffffffffcf15, 0x58c, 0x100000001, 0x0, 0x1d97, 0x100, 0x7, 0x80, 0x4, 0x91, 0x100, 0x100000000, 0x1, 0xfd4a, 0xfff, 0x7, 0x20000000000000, 0x7f, 0x1, 0x5, 0x1ff, 0xe8, 0x3, 0x5, 0x9, 0x4, 0x3f, 0x0, 0x5, 0x20, 0x7dbc51b1, 0xffffffff, 0x3ff, 0x0, 0x6, 0x3f, 0x3a7, 0x8, 0x0, 0xa174dce, 0x1, 0x2, 0x81, 0xbf71, 0x2, 0xff, 0x7, 0x200, 0xec9f, 0xcd, 0x8, 0x200, 0x8000, 0x7ff, 0x3, 0x5, 0x3ff, 0x6c, 0x4, 0x80, 0x4, 0x4, 0x9, 0x90e1, 0x0, 0x800, 0x7, 0x6, 0x1, 0x400, 0x5, 0x7ff, 0x6, 0x100000000, 0x7, 0x0, 0x8, 0x4, 0x2, 0x10001, 0x3, 0x9, 0x4, 0x0, 0x1, 0x8, 0x2, 0xa10a000000000000, 0x2, 0x6, 0xd6, 0x200, 0x401, 0x3, 0xd9ad, 0x3, 0x6, 0x8, 0x3f3, 0x6, 0xffff, 0x3, 0x97, 0x401, 0x2, 0x2, 0x9, 0x6, 0xfc, 0xa4a, 0x8000, 0x6, 0x80000001, 0xfffffffffffffffe, 0x5, 0x7, 0x401, 0x8000, 0x10, 0x80, 0x81, 0x200, 0x200, 0x0, 0x800, 0x5, 0x17a, 0x0, 0x101, 0x4, 0x0, 0x4, 0x100, 0x4, 0x9, 0x6, 0x10001, 0x6, 0x49ca, 0x401, 0xe9, 0xffffffff, 0x4af, 0x1, 0x0, 0x0, 0x2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0xfffffffffffeffff, 0x4, 0x8, 0xfffffffffffff001, 0x1f, 0x1, 0xfffffffffffffff7, 0xffffffff, 0x8, 0x1ff, 0x7f, 0x3, 0x8, 0x5, 0x5, 0xea9, 0xfff, 0xff, 0xff, 0x20, 0x4, 0xfffffffffffffe01, 0x39b, 0x5, 0x800, 0x0, 0x3, 0x2, 0x75a9d252, 0x3, 0x1000000000000, 0x400, 0x4000000000000000, 0x15, 0xa898, 0x80, 0x400, 0x6, 0x3, 0x3, 0x319, 0xfffffffffffff000, 0x6, 0x10001, 0x9, 0x7344, 0x8, 0x7, 0x7, 0x6, 0x80, 0x3, 0x1ff, 0x7fff, 0x3, 0xb5c5, 0xbf3c, 0x4, 0x81, 0x64000000000000, 0x2, 0xfffffffffffff0e2, 0x3ff, 0x3, 0x2, 0x518, 0xae, 0x20c2, 0xfffffffffffffffa, 0xd1e, 0x8b, 0x80000001, 0x1, 0x0, 0x7fffffff, 0x6, 0x3, 0x8, 0x7, 0x5, 0x72, 0x3, 0x6, 0x6, 0xfffffffffffff220, 0x80000001, 0x3, 0x648, 0xfffffffffffffff8, 0x10001, 0x80000001, 0x4, 0x5, 0x20, 0xbf, 0x1, 0x8, 0x80000001, 0x7fffffff, 0x5, 0x2, 0x8, 0x6bc, 0x8, 0x9, 0x5, 0x7, 0xffffffffffff1662, 0x9, 0x9, 0x80000001, 0x4, 0x3d8, 0x4, 0xff, 0x28, 0xfffffffffffffff9, 0x1, 0x5, 0x0, 0x0, 0xffffffff00000001, 0x1, 0x8, 0x9, 0x5, 0xff, 0xb0f3, 0x8000, 0x5, 0x100000000, 0x7, 0xbc, 0x9, 0x5, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0x9, 0xc269, 0x0, 0x4, 0x6, 0x80, 0x1, 0x5, 0x8fe6, 0x7, 0x3, 0x0, 0x4, 0x5, 0x3f, 0xffffffff, 0x1, 0x1f, 0x3ff, 0x0, 0x1ff, 0x100000000, 0x8, 0x25, 0x7fffffff, 0x5cd, 0x5, 0x5, 0x3, 0x84, 0x1, 0x200, 0x6c, 0x7685, 0x5, 0x776a, 0x100000000, 0x7f, 0xff, 0x3, 0x2, 0x4, 0x9, 0xa981, 0x3, 0x5, 0x8aa1, 0x0, 0x4, 0x7, 0x8cb, 0x3, 0x200, 0x3, 0x1, 0xfffffffffffffff7, 0x1, 0x400, 0x6, 0x29, 0x81, 0x3, 0x9, 0x8, 0x2, 0x8, 0x0, 0x101, 0x10, 0x100, 0x1bc6, 0x209, 0xffff, 0x2, 0x5, 0x2, 0x9, 0xa00, 0x63, 0x50, 0x0, 0x7fffffff, 0x3, 0x0, 0x80, 0x6, 0xffffffffffff2892, 0x9, 0x7d0, 0x4, 0x8001, 0x100, 0xfa2, 0xfffffffffffffffd, 0x3, 0x312e, 0x7f, 0xb61, 0xbf, 0x3, 0xa88f, 0x20, 0x1ff, 0x13, 0x6, 0x7, 0x3b6, 0x5, 0xae, 0xfffffffffffffff7, 0x401, 0x3, 0x5, 0xadf, 0x4d, 0xbf, 0x1000, 0x2, 0x0, 0x2, 0x3, 0x6, 0x6f, 0x8, 0x1, 0x4, 0x9, 0x7ff, 0x7, 0x7, 0xf0, 0x3, 0x1, 0x74c, 0x1, 0x1, 0x4, 0x1b, 0xb8, 0x40, 0xe07, 0x1f, 0x7fffffff, 0x81, 0xffffffff, 0x5, 0x6, 0x7, 0x7, 0x43, 0x85, 0x8, 0x6, 0x8, 0x7f3, 0xfffffffffffffffb, 0x2, 0x2, 0x79ca, 0x400, 0x1ff, 0x4, 0x2, 0x0, 0x6, 0x1ff, 0x7, 0x7, 0x7, 0x2, 0x2, 0x3f, 0x4, 0x3d55, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x7, 0x9, 0x9, 0x0, 0x100000001, 0x10000, 0x7fffffff, 0x40, 0x7fffffff, 0x400, 0x8, 0x8001, 0x7ff, 0xfffffffffffffc01, 0x80000000, 0x2, 0x4, 0x995, 0x2, 0xd33, 0x30, 0x2e51, 0x2d, 0x1, 0x7, 0x1, 0x8001, 0x8, 0x2, 0x1f, 0x2, 0x7f, 0x2, 0x380000000, 0x10001, 0x6, 0x3, 0x100000001, 0x37d6, 0x1000, 0x391, 0x0, 0x2, 0x0, 0x8, 0x1, 0x7, 0x4, 0x4, 0x6, 0x101, 0xffffffffffffff00, 0x6, 0x1ff, 0x3, 0x80, 0x5, 0x7fff, 0x2, 0x4, 0x40a, 0xab, 0x7f, 0x4, 0x10000, 0x7, 0xff, 0x4, 0x800, 0x7, 0x5, 0x20, 0x80000000, 0x9, 0x5, 0x7fffffff, 0x7fff, 0x0, 0x8, 0x8000, 0x2, 0x0, 0xfffffffeffffffff, 0x0, 0x3a984000000, 0x1, 0x39f, 0x8, 0x7, 0xc239, 0x100000000, 0x5, 0x3ff, 0x7ff, 0x1, 0x5, 0x5, 0xfff, 0xfffffffffffffc00, 0x6, 0x5, 0x3ff, 0x100000000, 0xc1a, 0xffffffff, 0x80000001, 0x4, 0x7a, 0x0, 0x80000001, 0x5f, 0x200, 0x1, 0x1645, 0x3e0000, 0x2, 0x401, 0x4, 0x9, 0x1ff, 0x9, 0x938b, 0xfffffffffffff001, 0x3, 0xbc, 0x40, 0x3, 0x2, 0x6, 0x3, 0xffffffffffff46d7, 0x170b740f, 0x5, 0x1, 0x4df3, 0x0, 0x20, 0x3ff, 0x6, 0x8, 0x20, 0x7ff, 0x2, 0x6, 0x1, 0x5, 0x5a, 0xffffffffc62fdcba, 0x73, 0x10000, 0x1, 0x40000000000000, 0x1, 0x81, 0x3, 0x2, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x11, 0xbc, 0x2, 0x7, 0xb299, 0x0, 0x5, 0x6, 0xbbd, 0x200, 0xd2, 0xcf, 0x4, 0xfff, 0x1, 0x9, 0x100000001, 0xa49, 0x1, 0x6, 0xb3a, 0x200, 0xfffffffffffffffa, 0x6, 0x4bf, 0xe11c, 0x5, 0x1, 0x0, 0x9, 0x7, 0x401, 0x7, 0x9, 0x0, 0x3943d463, 0x20, 0x7fffffff, 0x69, 0x1, 0x80000001, 0x7, 0x5, 0x20, 0x1, 0x0, 0x3, 0x5, 0x6, 0x26, 0x0, 0x80d, 0x0, 0x80, 0x400, 0x63, 0xfffffffffffff800, 0x5a71, 0x7, 0xa3ab, 0x1, 0xed, 0x9, 0x1, 0x4, 0x7fff, 0x100, 0x81, 0x9, 0x1, 0x90f5, 0x80000000, 0x1, 0x6, 0x0, 0x5, 0x20000000000000, 0x3, 0x1fe0000, 0xffffffffffff8000, 0x8, 0x100000000, 0x80000000, 0x8c8, 0x6, 0xfffffffffffffffa, 0x5, 0x9, 0x100, 0x7, 0x9, 0x2d, 0x4, 0x72a, 0x995, 0x5, 0x100000000, 0x0, 0x1, 0x76f35707, 0x4, 0x100, 0xea2ff85, 0x6, 0x1f, 0x6cf2e82b, 0xa8, 0x8515, 0x10000, 0x0, 0x43, 0x7, 0x2, 0x9, 0x7, 0xf166, 0x7fffffff, 0x76d, 0x7, 0x5, 0x5, 0x8, 0x7, 0x7fff, 0x1, 0x100000000, 0x0, 0x3, 0x0, 0x9, 0x38c, 0x7, 0x7, 0x0, 0x0, 0x101, 0x1, 0x3, 0x80000000, 0x3, 0x1, 0x9, 0x0, 0x7fff, 0x10001, 0x1, 0x0, 0x4, 0xec, 0x400, 0x6f, 0x1ae, 0x3ff, 0x3, 0x8, 0x1584, 0xa975, 0x7, 0x8000, 0x7fff, 0xe12, 0x1f, 0x401, 0xa7a, 0x3f, 0x9, 0xd0d, 0x9dc3, 0x8, 0x10000, 0x20000000000000, 0x3817, 0x6, 0x4, 0xffffffff, 0x80, 0x0, 0x2, 0x5, 0x40, 0xe4, 0xace, 0x7, 0xfe, 0x8738, 0x1, 0x5, 0x2b, 0x9, 0x2, 0x3, 0x6423, 0x9, 0x7f, 0x5, 0x1, 0x10000, 0x5, 0x62, 0x8, 0x80000001, 0x6f4, 0xffff, 0xffffffff80000001, 0xfffffffeffffffff, 0x2, 0x9, 0xe3, 0x0, 0x6, 0x2, 0x3, 0x6ed, 0x4, 0x7, 0x8001, 0x4a6, 0x6, 0x80000000, 0x6, 0x8, 0x3, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x10000, 0xffffffffffffef80, 0x4, 0x0, 0x8, 0x2, 0xec7, 0x1, 0x3, 0x9, 0x0, 0x1ff, 0x1000, 0x1000, 0x0, 0x1, 0x1, 0x2, 0x3, 0x1, 0x8, 0xffff, 0x28c, 0xfff, 0x149, 0x1000, 0x6, 0xbbf3, 0x7fff, 0x81, 0x1, 0x8, 0x7f, 0x7fffffff, 0x7, 0xcad7, 0x5, 0x2, 0xfffffffffffffffd, 0x8, 0x9, 0x7, 0x40, 0x5, 0x5, 0x5, 0x9bfe, 0xa1d, 0x8, 0x6, 0xa5, 0x52, 0x9, 0x0, 0x6, 0x590, 0x9, 0x8, 0x6, 0x4, 0x27, 0x3, 0x1e214781, 0x9, 0x7ff, 0x6, 0x8, 0x1, 0x800, 0x6, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x100, 0x29, 0x4, 0x5, 0x3f, 0x1, 0x3, 0xffff, 0x3165, 0x1, 0x100, 0xfff, 0x1f, 0x5, 0xfffffffffffffff7, 0x0, 0x2, 0x0, 0x81, 0x6, 0x20, 0x3, 0x6, 0x6, 0x4c, 0xacc, 0x1, 0x7, 0x80000001, 0x73, 0x5, 0x2, 0x9, 0x20, 0x6, 0x1f, 0x7, 0x1000, 0x9, 0xa0, 0xb0e, 0xffffffff00000001, 0x8, 0x7, 0x200000, 0x8000, 0x9, 0x7, 0x9, 0x101, 0x101, 0x8, 0x101, 0x7408, 0x26, 0xfffffffffffffffb, 0x1625, 0x40, 0x2000, 0x3, 0x10000, 0x7, 0x0, 0x2, 0xb3, 0x40, 0x8, 0x5, 0x898d, 0x10000, 0x8, 0x6, 0x5, 0x400, 0xfffffffffffffffb, 0x7fff, 0x13cd, 0x10000, 0x7fffffff, 0x5, 0x0, 0x9, 0x200, 0x10001, 0x401, 0x2, 0x2267, 0x1, 0x20, 0x0, 0x8001, 0x80000000, 0x8001, 0x2, 0xd39d, 0x4, 0x1, 0x245, 0x7, 0x2, 0x1, 0xbf8d, 0x4, 0x6, 0x8, 0xfffffffffffffffe, 0x9, 0x8, 0x10001, 0x200, 0x8, 0x3, 0x600000000, 0x0, 0x3, 0x1, 0xffff, 0x40, 0x9, 0x8001, 0x7ff, 0xfffffffffffffffa, 0x0, 0xab3, 0x9, 0x800, 0x9f, 0x1, 0x5, 0x1, 0x4cc5, 0x2, 0x218b, 0x7, 0x68, 0x2, 0x20, 0xfffffffffffff801, 0x4, 0x9, 0x54, 0x8, 0x5, 0x6, 0x95, 0x1, 0xd0, 0x40, 0x8, 0x305b, 0x8, 0x100000001, 0x6, 0xfffffffffffffc00, 0x7, 0x5, 0x1, 0x4, 0x3f8a, 0x8, 0xe6, 0xd5, 0x8, 0x9, 0x8, 0x2, 0x9, 0xfffffffffffffffc, 0x3, 0x3, 0x9, 0xfff, 0x3, 0x8, 0x1, 0x411, 0x101, 0x135c, 0x4, 0x7fff, 0x1a3, 0x8, 0x5, 0xfdf, 0x2e7, 0x88, 0x0, 0x80, 0x0, 0x80000001, 0xfffffffffffffffe, 0x3ff, 0xed, 0x80000001, 0x2, 0x1c00, 0xffffffffffff0000, 0x7, 0x7, 0x2d1, 0x800, 0xffff, 0x3, 0x7, 0x8, 0xa89b, 0x3ff, 0x0, 0x5f6f, 0x200, 0x1ff, 0x200, 0x8, 0x3, 0x7, 0xac9b, 0x9, 0x4, 0x7, 0x7ff, 0x200, 0x74, 0x3, 0x58, 0x0, 0x2, 0x8, 0xa6, 0x3fe00000, 0x9, 0x800, 0x7fff, 0x3, 0x1, 0x80000000, 0x3, 0x7, 0x0, 0x100, 0x5, 0x3, 0x2, 0x6, 0x4, 0x0, 0x6, 0xf4, 0x80, 0x9, 0xa0, 0x9, 0x1, 0x6, 0x4039, 0x3, 0x7f, 0x9, 0x10001, 0x6727, 0xfffffffffffffffa, 0x8, 0xc5, 0x3, 0x5, 0x6, 0x1915, 0x1, 0xd9, 0x5, 0x200, 0x4, 0x266b, 0x100000001, 0x1ff, 0xffff, 0x4, 0xffffffffffff171d, 0x8, 0x8053, 0xfffffffffffffffb, 0x9, 0x1, 0x2, 0x8, 0x2, 0xfff, 0x7, 0x57d4, 0x6, 0x80000000, 0x1, 0x0, 0xffff, 0x80000001, 0x3ff, 0x8, 0x8, 0x5, 0x8, 0x800, 0xfffffffffffffffe, 0x8, 0x100000001, 0x7fff, 0x3f, 0x0, 0x6, 0x0, 0x5, 0x20, 0x9, 0x8, 0x4, 0x9, 0xb8f, 0x81, 0x1, 0xfffffffffffffffb, 0x81, 0x101, 0x9, 0x7, 0x61, 0x4, 0x9, 0x6, 0x6, 0x7, 0x3, 0x200, 0x401, 0x81, 0x1, 0x3, 0x4, 0x4, 0x3, 0x8, 0x6, 0x81, 0x1, 0x22fc46a1, 0x20, 0x3f, 0x9, 0x9, 0x6, 0xffffffffffffffe0, 0x4, 0x2, 0x2, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x5, 0x7fff, 0x9, 0x6, 0x4, 0x7, 0x40, 0x7f, 0x6, 0x200, 0x6, 0x0, 0xfffffffffffffc00, 0x767a, 0x3, 0x2c, 0x5, 0x2, 0x6, 0x9, 0x3ff, 0x9, 0x3, 0xbc2, 0x3, 0x7fff, 0x8000, 0x8, 0x8, 0x8000, 0x9, 0x100000000, 0x101, 0x401, 0x7be, 0x1, 0x3f, 0x4dd4, 0x20, 0x81, 0x3ff, 0x8, 0xffffffffffffffff, 0x5d6, 0x40, 0x293c, 0x2, 0x5, 0x9, 0xa8, 0x9, 0x1, 0x5, 0x1, 0x40000000000, 0x8, 0x0, 0xfffffffffffffffb, 0xffffffffffffff7f, 0x1, 0x0, 0x4d, 0x2, 0x401, 0xffff, 0x6, 0x4, 0xfff, 0xff, 0x4, 0x3f, 0x7, 0x5f4a, 0xd67, 0x5, 0x0, 0x3ff, 0xa8b3, 0x800, 0x10001, 0x3, 0x4, 0xbe, 0x6, 0xfffffffffffffff9, 0x2, 0x3, 0xce8f, 0x8d, 0xff, 0x6, 0x9, 0x1, 0x1ff, 0x401, 0x1000, 0x800, 0xb08, 0x2, 0x1, 0x401, 0x9, 0x32e38b8a, 0x7ff00000, 0x800, 0x100, 0x0, 0xedb5fbb000, 0x20, 0x3, 0x9, 0x2, 0xff, 0x100000001, 0x7fff000000000000, 0x1b3, 0x779, 0x1, 0x1f, 0x8, 0x2, 0x81, 0x7, 0x1ff, 0x2eb, 0x6, 0x81, 0x8, 0x7fffffff, 0x9, 0xa1bf, 0x2, 0x2, 0x2, 0x1ff000000000, 0x3f, 0x5c40, 0x40, 0x4, 0x2, 0x1000, 0x8b, 0xfffffffffffffff8, 0x6, 0x1, 0x8, 0x0, 0x1, 0x7f, 0x0, 0x20, 0x9, 0x3, 0x2, 0x7, 0x9, 0x1f, 0x0, 0xde, 0xffffffff, 0x2, 0x800, 0x20, 0x800, 0x1, 0x6, 0x9ece, 0x2, 0x5af9, 0xfffffffffffffff7, 0x2, 0x9, 0x7f, 0x4, 0x8000, 0x10000, 0xb63e, 0x7f, 0x6e, 0x2, 0x101, 0xffffffffffff0001, 0x8, 0x6, 0x7ff, 0xffffffff, 0x4, 0x80, 0x6, 0xffffffffffffff9d, 0x3, 0x8, 0xc3e, 0x3, 0xffffffffffffffd9, 0x81, 0x8, 0x71, 0x9, 0x8001, 0x101, 0x1, 0x2, 0x8, 0x4, 0x7fffffff, 0x3, 0x3, 0x7ff, 0x0, 0x8a, 0x0, 0x9, 0x9, 0x9, 0x100000000, 0x9, 0x1, 0x9, 0x1f, 0x56f, 0x9, 0x100000000, 0x9, 0x3, 0xea800000000000, 0x9, 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0xfffffffffffff673, 0x9, 0x40, 0x2, 0x5, 0x6, 0x1, 0x0, 0x4, 0x40, 0x0, 0x7ff, 0x8000, 0x0, 0x6, 0x100, 0x9, 0x2, 0x7, 0x37d, 0x3f, 0x9, 0x401, 0x6d, 0x433, 0x1, 0x3, 0x8, 0x9, 0x1, 0x4, 0x3, 0x4, 0x9, 0x9, 0x0, 0x40, 0xffffffffffffffff, 0xb21, 0x1ff, 0xfffffffffffffff9, 0x9, 0x7, 0x3, 0x80000001, 0x4, 0x2, 0x4fdf, 0x4, 0x6, 0x0, 0x8000, 0x1000, 0x7f, 0x2, 0xfffffffffffffffb, 0x401, 0x7, 0x6, 0x9, 0x2, 0x7, 0x8, 0x9, 0x2, 0x30, 0x0, 0x7, 0xc09f, 0x81, 0x7, 0x6, 0x4, 0x7ff, 0x101, 0x4, 0x9, 0x1, 0x474, 0x3, 0x2, 0x4, 0x8, 0x1, 0x1000, 0x8000, 0x3, 0x5b8, 0x1, 0x6, 0x3ff, 0x2, 0x17, 0x9, 0x2, 0x1, 0x6, 0x1, 0x0, 0x1, 0x80, 0x6, 0x100, 0x6, 0x7, 0x2, 0x1c8f6f18, 0xffff, 0x20a, 0x0, 0x2, 0x8, 0x101, 0x7, 0x40, 0xfffffffffffffff7, 0x200, 0xfff, 0x80d, 0x2, 0x3, 0x5, 0x10001, 0x9, 0x0, 0xffff, 0x1, 0x0, 0x80000001, 0x100000000, 0x9, 0x0, 0x6, 0x20, 0x80, 0x4, 0xc0, 0x5a4, 0x10000, 0x40, 0x9, 0x8, 0x0, 0x8, 0x9, 0x80000001, 0x3fffc000000000, 0x40, 0x4, 0x100000001, 0x6, 0x80, 0x2, 0x227, 0x1, 0x80000001, 0x2, 0x59, 0x2, 0xfffffffffffffff8, 0x559, 0x81, 0xc711, 0x2ec, 0x0, 0x3000, 0x5, 0x67, 0xf497, 0x4, 0x80000000, 0x9a, 0x7ff, 0x5, 0x7fffffff, 0xffffffffffff5775, 0xf3, 0x80000001, 0x2c, 0x87c, 0x2d7, 0x7fff, 0x4, 0x4, 0x6, 0x3, 0x7, 0xfffffffffffffffe, 0x7, 0x80000000, 0x6, 0x7, 0x3, 0x2, 0x4, 0x9, 0xffff, 0x5, 0x3, 0x40, 0x3, 0xfff, 0x8, 0x4, 0x1, 0x6, 0x9, 0x9bf, 0x40, 0x80000000, 0x8, 0x40, 0x0, 0xf463, 0x400, 0x5ea9678d, 0xfffffffffffeffff, 0x8, 0x4, 0x57, 0x98b, 0x7, 0xffc0, 0xffff, 0x1ff, 0x6, 0x2, 0xee67, 0x9, 0x3, 0x400, 0x6, 0x6, 0x7, 0x7fff, 0xfff, 0x0, 0x1, 0xed, 0x1f, 0x7522, 0x100, 0x9, 0x100000000000000, 0xae6, 0xff, 0x62f4, 0x4, 0x31, 0x3e9, 0x9, 0xfff, 0x77579cb7, 0x80000000, 0x1, 0x5, 0xffffffffffffffff, 0xfff, 0x401, 0x253, 0x3, 0x0, 0x1, 0x100000001, 0xe1e, 0xda9, 0x8, 0x712d, 0xe3d, 0x9f3b, 0xffff, 0x9, 0x7, 0x1, 0x3f, 0x9, 0x0, 0x2, 0x400, 0x6, 0x5, 0x0, 0x6, 0x91db, 0x9, 0xad1, 0x7, 0x80, 0xffffffffffffff01, 0x4, 0x2, 0x800, 0x4, 0x0, 0x9, 0x9, 0x6, 0x74b, 0x7fff, 0x9, 0x7, 0x1000, 0x4, 0x0, 0x5, 0x418, 0x8000, 0x20, 0x400, 0xff, 0x6, 0x0, 0x3ff, 0xc8c7, 0x1, 0x1f, 0x1, 0x401, 0xfac0, 0x6e, 0x0, 0xda, 0xb36, 0x1, 0x0, 0x100000001, 0x0, 0x400, 0xffffffffffffffff, 0x1242, 0xbf, 0x10001, 0x9, 0x9, 0x9, 0x4, 0x0, 0xffffffffffff8001, 0x8, 0xfff, 0xfffffffffffff893, 0x884, 0x2, 0x1, 0x40, 0x0, 0x9, 0x9, 0x5, 0x5, 0x100000001, 0x5, 0xf2e3, 0x5, 0x5, 0x7, 0xfffffffffffffc01, 0x1, 0x5, 0x4, 0x6, 0x3, 0x1, 0x5d, 0x56da, 0x80, 0xffffffff80000001, 0x4, 0x3, 0x100000000, 0x6, 0x2, 0x3, 0x8, 0x6, 0x5e, 0x100, 0x1f, 0x8000, 0x1, 0x3, 0x8, 0x9, 0x4, 0x8, 0x8, 0xa, 0xffffffff, 0x1, 0x86c, 0x2, 0x3, 0x7, 0x8, 0xcdd1, 0x2, 0x7, 0xb4b, 0x6, 0xe35, 0x8, 0x800, 0x1000, 0x6, 0x9, 0x58c992af, 0x4000000000000, 0xfffffffffffffbff, 0x80000000, 0x0, 0xe1c, 0x8, 0xfffffffffffffe00, 0x1, 0x1f, 0x3, 0xfff, 0x1, 0x2, 0x401, 0x1ff, 0xdf05, 0x4, 0x4, 0x6, 0x2, 0x1f, 0x1, 0xffffffffffffffff, 0x1ff, 0x3, 0xa26, 0x3, 0x401, 0x8, 0xf4, 0xffffffffffffffff, 0x7fffffff, 0x1000, 0x5, 0x800, 0x9, 0xa3ba, 0x9, 0x2, 0x8001, 0xff, 0x7, 0x6, 0x7, 0x81, 0x1f, 0x0, 0x4, 0x3, 0xf536, 0xfdd4, 0x8, 0x4b4f28f1, 0xffff, 0x7, 0x1440000000000000, 0x55, 0x10000, 0x7, 0x200, 0x3ff, 0x7, 0x8, 0x19, 0xfff, 0x1, 0xafa6, 0x6, 0x8, 0x7ff, 0x100000001, 0x2, 0x4, 0xfff, 0xfff, 0x40, 0xe2, 0x400, 0x6, 0x10000, 0x5, 0xbfa3, 0x0, 0x3, 0x2, 0x7, 0xf0, 0x7, 0x8, 0x92c, 0x7f, 0x401, 0xfff, 0x1, 0x7, 0xbe, 0x7ff, 0xffffffffffffffff, 0x4, 0x647f, 0xd2c8, 0xffffffffffff8000, 0x200, 0x8, 0x40, 0x6, 0xff, 0x6, 0x7f, 0x4, 0x68, 0x10000, 0x1f, 0x401, 0xffff, 0x200, 0x2, 0xffffffffffffff73, 0xcb3, 0x0, 0x2, 0x1, 0x8, 0x5, 0x6cfe, 0xfffffffffffffffe, 0x3cf4, 0x9, 0x2, 0x6, 0x7fff, 0x4, 0xffffffff, 0x7ff, 0x3, 0x2, 0xd1bf, 0x7, 0x6, 0x1f, 0xfffffffffffff800, 0x3, 0x0, 0x7, 0x0, 0x3, 0x7, 0x5, 0xffffffff, 0xcf, 0x7, 0x9, 0x0, 0x2f, 0xffffffff, 0x3, 0x1, 0x3f, 0x400000000, 0x8001, 0x2, 0x8001, 0x1595, 0x5, 0x2, 0x9, 0x9, 0x9, 0x7fffffff, 0xfffffffffffffffe, 0x8, 0x6, 0x9, 0x0, 0x7d33, 0xfbf, 0x1, 0x4, 0x0, 0xffffffffffffad9d, 0x8, 0x1f, 0x9311, 0x3, 0x609, 0x0, 0x0, 0x5, 0x2, 0x9db, 0x2, 0x6367, 0xfffffffffffffff7, 0x2b, 0x8, 0x83b, 0x1000, 0x8c, 0x0, 0x4b, 0x7ff, 0xfffffffffffffffb, 0xffffffff, 0x60c8, 0x0, 0x7fff, 0x0, 0x7f, 0x4, 0x8, 0x200, 0x3f, 0x0, 0x6, 0x993, 0x2, 0x5, 0xfffffffffffffff7, 0x7fff, 0x7, 0x66, 0x100, 0x3ff, 0x1, 0x0, 0x9ca8, 0xfffffffffffffa25, 0xbebb, 0x8001, 0x0, 0x8, 0x4, 0xffff, 0x7ff, 0x4d, 0x6e, 0x2, 0x7, 0x10000, 0x10000, 0x4a, 0x625a, 0x2, 0xffffffffffffff81, 0x2, 0x8000000000, 0xb98, 0x5cf5, 0x7, 0x5, 0xfb, 0x5, 0x8afb, 0x1b, 0x5, 0x3, 0x8, 0x20, 0x1ff, 0x10001, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1f, 0x3, 0x8, 0x6, 0xa441, 0x4, 0x4, 0x81, 0x800, 0x401, 0x6, 0x100000000, 0x5, 0x2637, 0x3, 0x3f, 0x1, 0x7, 0xfffffffffffffff9, 0x1, 0x0, 0x40, 0x5, 0x100000000, 0x96, 0x5912, 0x5, 0xa1, 0x8, 0x7, 0x200, 0x0, 0xffffffffffffff50, 0x75, 0x2, 0x5, 0x4, 0x55c84de3, 0x8, 0xe4, 0x1ff, 0xc2f9, 0x5, 0xa9f, 0x4, 0x7, 0xb9, 0x4, 0x66, 0x7fff, 0x5, 0x6, 0x9, 0x43e0, 0x200, 0x9, 0x0, 0xdf, 0x7fffffff, 0x6, 0x7, 0x9, 0x5, 0xff, 0x435d, 0x1, 0x2, 0x5, 0x70000000000000, 0x2, 0x1, 0x7fffffff, 0x0, 0x101, 0x0, 0xfffffffffffffff8, 0x1, 0x6, 0x0, 0x4, 0x3, 0x0, 0x8, 0x7f, 0x20, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x3, 0x22, 0xfffffffffffffffe, 0x6, 0x80000000, 0x8, 0x5, 0x3, 0x4, 0x1, 0x2, 0x8, 0x3b8a, 0x3, 0x7441, 0x70f, 0x81, 0x6, 0x1, 0x2b1b3351, 0x0, 0xe41, 0x401, 0x9, 0x8, 0x20, 0xfffffffffffffffc, 0x9, 0x2, 0x80000000, 0x36, 0x5, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x9, 0x81, 0x2, 0xf3, 0x5, 0x6a7d, 0x1000, 0x401, 0x8, 0x2, 0x0, 0xffffffff, 0x5, 0x3, 0x1, 0x9, 0x3, 0x5, 0x9, 0x3, 0x1ff, 0x37000000000000, 0x8000, 0x4, 0x3, 0x20, 0xe1b, 0x65, 0x8, 0x8001, 0x7, 0x0, 0x9, 0x9, 0x6, 0x4, 0x1000, 0x80, 0x400000000000000, 0x6dc, 0x7, 0x80000001, 0x4, 0xffff, 0x0, 0x800, 0x3ff, 0x3, 0x42e2, 0x7f, 0x1ff, 0x9, 0x9, 0x7, 0x4, 0x3a3, 0x200, 0x0, 0x70, 0x80000001, 0x100, 0x100000001, 0x5, 0x1, 0x100000000, 0x3, 0x5, 0x7ff, 0x4, 0x0, 0x2, 0xff, 0x6, 0x1, 0x7f, 0x4, 0x1000000000000, 0x6, 0xfffffffffffffff7, 0x1, 0x0, 0x8, 0x393, 0x8001, 0x400, 0x100000000, 0x1, 0x6, 0x81, 0x5, 0x8, 0xe3ff, 0x7fffffff, 0x3, 0x3, 0xb3, 0x40, 0x4, 0x10000, 0x4, 0x3, 0x6, 0x6, 0xffffffff, 0x8, 0x8, 0x1000, 0x1, 0x7fffffff, 0x7fffffff, 0x39c, 0x1, 0x6, 0x6b, 0x2, 0x0, 0x9, 0x6, 0x2, 0x80000000, 0xfffffffffffff000, 0x8001, 0xff, 0x40, 0x401, 0x7, 0xd471, 0xffffffffffff0001, 0x10000, 0x6, 0x10001, 0x9, 0x4, 0x5, 0x7, 0x1, 0x1f, 0x9, 0x20, 0x100000001, 0x7780, 0x800, 0x9, 0x6f, 0x9, 0x4788e712, 0x8000, 0x8, 0x10001, 0x1, 0xc9c5, 0x20, 0x7eb, 0x3, 0x9, 0x9, 0x0, 0x5, 0x1000, 0x9, 0x5aa, 0x4, 0x81, 0x8, 0x7982, 0x10000, 0x4, 0x7f, 0x0, 0x3ff, 0xb720, 0x61, 0xa59, 0x7fff, 0x3, 0x6d4b, 0x6, 0x101, 0x401, 0x8861, 0x0, 0x5, 0x3, 0x17b9, 0x100000000, 0x9, 0x0, 0x1, 0x2, 0x2, 0x5, 0x1, 0x40, 0x0, 0x0, 0x4, 0x0, 0xd5ca, 0x2, 0x7, 0x1, 0x5000000, 0x3, 0xe64, 0x80000000, 0x7, 0x100000000, 0x0, 0x9, 0x2, 0x8, 0x7, 0x2, 0x80, 0x1000, 0x1, 0x1, 0x1, 0x10001, 0x3, 0xffff, 0x8a66, 0x4, 0x6, 0x8, 0x7, 0x7, 0x100000001, 0x45cc, 0xb, 0x8, 0x2be6, 0x3, 0x6, 0x3ff, 0xfffffffffffffff9, 0x7c7546fd, 0x100000000, 0x100000001, 0x4000000000000, 0x40d, 0x9, 0x3f, 0xffffffff, 0x1, 0x1, 0x1ff, 0x8, 0x8, 0x7f, 0x9, 0x45, 0x8, 0xffffffff, 0x1, 0x1000, 0x1, 0x77, 0x3ff, 0xffffffffffffffe0, 0xfffffffffffffffc, 0x1, 0x7fff, 0x7, 0x401, 0x2, 0x7, 0x24, 0x6, 0x4aa, 0x8001, 0x800000000, 0x20, 0xfffffffffffffe01, 0x6, 0x1, 0x6, 0x9dc, 0x6e, 0x4484, 0x1, 0x9c8, 0x4, 0x4, 0xfffffffffffffff8, 0x3, 0x1, 0x3f, 0x6, 0x1, 0x8001, 0x0, 0xff, 0x7, 0x3014, 0x2467, 0x7f, 0x0, 0x9, 0x7ff, 0x5, 0x68888f, 0x3, 0x7fff, 0x4, 0x20, 0xfffffffeffffffff, 0x9, 0x1, 0x3ff, 0xffffffffffffff1f, 0x7fff, 0x1000, 0x9, 0x400, 0x2, 0x70c, 0x7fff, 0x4, 0xf6c2, 0x793e, 0x100000000000000, 0x6, 0x3f, 0x4, 0xffffffffffffff80, 0x7, 0x80000000, 0xe0, 0x92, 0x7f, 0x6, 0x1, 0x4, 0x80000000, 0x80000000, 0x2, 0x6, 0x9, 0xff, 0xfb, 0x5, 0xffff, 0x3, 0x8, 0x4, 0x100000001, 0x9, 0x7, 0x1, 0x4, 0x7, 0x4, 0x7a060, 0x2, 0x6, 0x5b, 0x237c38fe, 0xff, 0x800, 0x7f, 0x1000, 0x0, 0x9, 0x1, 0x100000001, 0x200, 0x7, 0x0, 0x8001, 0x5, 0x1, 0x1, 0x5, 0x2, 0x2, 0x7ff, 0x7, 0x7ff, 0x6, 0xfffffffffffff801, 0x5, 0x0, 0x2, 0x7, 0x2, 0x2, 0x4, 0x7fffffff, 0xfffffffffffffff8, 0x3, 0x20, 0x6, 0x6, 0x6, 0xffffffff, 0x100000001, 0x4, 0x0, 0x8, 0x100000001, 0x170, 0x5, 0x3ff, 0xf0, 0x3f531c67, 0xffffffffffffff80, 0x6d, 0x4, 0x2, 0x80, 0x7, 0x0, 0x151, 0x4, 0x401, 0x20, 0x1ff, 0x5f6, 0x3, 0x6, 0x8af1, 0x2, 0x7f, 0x22, 0x0, 0x8, 0x40, 0x81, 0xff, 0x1, 0x9, 0x3, 0x7d5, 0x7, 0x5, 0x4e60, 0x9, 0x81, 0x7fff, 0x5, 0x3, 0x80, 0x2, 0x101, 0x3, 0x25, 0x9, 0x2, 0x73, 0x5, 0x7, 0x8, 0xe, 0x7fffffff, 0x9, 0x1, 0x4, 0x4, 0x100, 0x352, 0x2, 0xfff, 0x2, 0x4, 0x0, 0xffffffffffff9f30, 0xff, 0x0, 0x101, 0x93, 0xa6, 0x200, 0x1, 0xc11e, 0x9, 0x5f7, 0x5, 0x8, 0x7fff, 0x3ff, 0x6, 0x7, 0x80000001, 0xffff, 0x7b7, 0xb, 0x8, 0xfe, 0x2, 0x3, 0x1afddb5c, 0x0, 0x3f, 0x0, 0x1f, 0x5, 0x2fe, 0x2, 0x10000, 0x5a4, 0x7, 0x0, 0x9, 0x1, 0x1, 0x7, 0x0, 0x1ff, 0x7, 0x1f, 0x80000001, 0x2, 0x7, 0x3, 0x3, 0x4, 0x1, 0x1000000, 0x6, 0x75e, 0x10001, 0x80, 0x8f, 0x7fff, 0x2, 0x5, 0x7, 0x8, 0x10001, 0x6, 0x92, 0x0, 0x3f, 0x2, 0x1e8, 0x0, 0x5, 0x6, 0x3, 0x86, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xf42c, 0x7, 0x4, 0x5, 0x3a7f1093, 0x0, 0x80000000, 0xffffffffffffffd7, 0xfffffffffffffffd, 0x9, 0x4, 0x81, 0x6, 0x5, 0x4, 0x7c, 0xffffffffffffffe1, 0x7, 0x2e, 0x0, 0x7ff, 0x7fff, 0x29, 0x2, 0x8, 0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x8, 0x0, 0x7fffffff, 0x2, 0x4, 0x1, 0xc2, 0x3, 0x5, 0x8c0, 0x0, 0x7, 0x2, 0x9, 0x7fffffff, 0x7, 0x8, 0x1, 0x3, 0x2, 0xc22, 0x6, 0x0, 0x3, 0x7f, 0x7, 0x0, 0xa9e0000000000000, 0x8, 0x3, 0x2, 0x200, 0x8, 0x3, 0xfffffffffffffffb, 0x40, 0x9, 0x1, 0x0, 0x1, 0x9, 0x3, 0x471, 0x4b40, 0x8001, 0x4, 0x5, 0x20, 0xfff, 0x0, 0x5, 0x7fffffff, 0x5, 0xfffffffe0000, 0x5, 0x7661, 0xfffffffffffff000, 0x101, 0x7fffffff, 0x8, 0x3, 0x2, 0x7, 0x0, 0x6, 0x0, 0x4, 0x6, 0x101, 0x7, 0xc51, 0xa0a, 0x1, 0x5, 0x3, 0x9, 0xfffffffffffffff8, 0x5, 0x1, 0x6, 0x4, 0xffffffff, 0x1, 0x9, 0x4, 0x3, 0x9c4b, 0x400, 0x505, 0x1f, 0x80000000, 0x5, 0x1664d2c, 0x32d, 0x1, 0x7, 0x5eceacb8, 0xffff, 0xc4, 0x800, 0x8, 0x8, 0x3, 0x4, 0x81, 0x6, 0x7, 0x365eea71, 0x80, 0x5, 0x183, 0x3, 0x48000, 0x1ff, 0x4, 0x8000, 0x5, 0x2, 0xc8, 0x100000000, 0x81, 0x0, 0x9, 0xfffffffffffffcc5, 0x7, 0x1b, 0x8, 0x1f, 0x86, 0x8, 0x9, 0x8, 0xff, 0xdce6, 0x1, 0x1, 0x2, 0x101, 0xffff, 0x80000001, 0x3f, 0x80, 0x1, 0x0, 0x20, 0x3, 0x10000, 0x2, 0x4, 0x9, 0x47, 0x5, 0x1, 0x4, 0xe72, 0x200, 0xf6, 0x8, 0x0, 0x1, 0x80000000, 0x100000000, 0x8, 0x6, 0x5, 0xffffffffffffffa7, 0x1000, 0xffffffff, 0x7f, 0x4, 0xf18, 0xffff, 0x6, 0xe5, 0xffffffffffffffc0, 0x6, 0x8, 0x8, 0x5, 0x0, 0x7, 0x10000, 0x9, 0xd8bd, 0x200, 0x5, 0x800, 0x6, 0x1, 0x3ff, 0x1000, 0xffff, 0x54, 0x4, 0x41e, 0x98c, 0xbe67, 0x1f, 0x5, 0x0, 0x6, 0x5, 0x20, 0x5, 0x8, 0x8, 0xcff, 0x100, 0x80000001, 0x1, 0x5, 0x81, 0x9, 0x8, 0x7, 0x6, 0x107a, 0x5da0000000, 0xffffffff00000001, 0x6, 0x699, 0x1, 0x1, 0x8, 0x8, 0xbf3, 0x0, 0x4a, 0x6, 0x8, 0x80000000, 0x447a, 0x400, 0x7ff, 0x8, 0x7, 0x3f, 0x9, 0x3, 0x6, 0x6, 0x3, 0x10000, 0x80, 0x81, 0x10000, 0x1, 0xffffffffffffc611, 0x9, 0x5, 0x6, 0x8, 0x5, 0xfffffffffffffffa, 0xffffffff00000000, 0x10001, 0x1f, 0x100, 0x8, 0x4, 0x100000000, 0x9, 0x7df060b4, 0x7, 0x8, 0x9, 0x6, 0x3, 0x8000, 0x3, 0xfffffffffffffffc, 0x9, 0xbd, 0x4, 0x6, 0x7f, 0x100, 0x7, 0x3f, 0xffffffffffffffe9, 0x8, 0x0, 0x7fffffff, 0x0, 0x100, 0xffffffff, 0xd8fc, 0xd19, 0x3, 0x8001, 0x1, 0x1, 0x66, 0x80000000, 0x1, 0x6, 0xe0a, 0x3, 0x6, 0xffffffffffff8000, 0x5, 0x0, 0x20, 0x5, 0x0, 0x69e, 0x9, 0xfff, 0x0, 0x4, 0xffff, 0x0, 0xe1d, 0x2, 0x1a, 0x100000001, 0x3ff, 0x4, 0x100000000, 0x9, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0x1, 0x6, 0x2, 0x20, 0x401, 0x4f, 0x2, 0x7fff, 0xfff, 0x8001, 0x7, 0x2, 0x1, 0x7, 0x8, 0xffff, 0x9, 0x7, 0x985, 0x400, 0x9, 0xb750, 0x1, 0x6, 0x1, 0x0, 0x40, 0x2, 0x8, 0x999, 0x2, 0x7, 0x5, 0x4, 0x9, 0x5, 0x6, 0x401, 0xf0, 0xfffffffffffff1c1, 0x7ff, 0x3, 0x4, 0x9, 0x10000, 0xff, 0xffffffffffff3fd9, 0x2, 0x5c7, 0xa29, 0x7, 0x101, 0x9, 0xcaa000000, 0x8001, 0x5, 0x3f, 0x91, 0x800, 0x7ff, 0x7fff, 0x401, 0x7fffffff, 0xe8, 0x7, 0x9, 0x80, 0x748e, 0x6, 0xffffffff00000000, 0x80000000, 0x6, 0x1f, 0x3ff, 0x8, 0x319, 0xc71, 0x8, 0x2, 0x1, 0x5, 0x1ff, 0x8, 0x3f, 0x81, 0xa62, 0x5, 0x9, 0x10000, 0x7fffffff, 0xd4, 0x3f, 0x7, 0x0, 0x32, 0x24977400, 0x7, 0x80000000, 0x4, 0x7, 0x891b, 0x5, 0x7, 0x8, 0x8000, 0x3, 0x1f, 0x9, 0xf332, 0x7, 0x4, 0x3, 0x2, 0x4, 0x1, 0x7, 0x7, 0x8001, 0x1, 0x80, 0x7f, 0x40, 0x7fff, 0x10000, 0x400, 0x7fffffff, 0x9, 0xffffffff, 0x5, 0xffffffffffff8001, 0x1, 0x10000, 0xbcc, 0x3, 0x565, 0x5, 0x7, 0x8, 0x54cc, 0x0, 0x10000, 0x8, 0x5, 0x5, 0x7, 0x8, 0x4, 0x3, 0xa91, 0xff, 0x7, 0xff, 0x80, 0x8, 0x18d8, 0x1f, 0x8, 0x7f, 0x9a56, 0xff, 0x800, 0x5, 0x3, 0x4, 0x1, 0x1, 0x1, 0x9, 0x3, 0x8, 0x0, 0x918, 0xfff, 0x5, 0x2, 0x5, 0x200, 0x3ff, 0x6, 0x7f, 0x6, 0x400, 0x5, 0x5, 0xffffffffffffffff, 0xdc3, 0x5, 0x2, 0xac, 0x8, 0x7ff, 0x52ae, 0x1f, 0xb9a, 0x0, 0xabe9, 0x8001, 0x202, 0x3f, 0x1ff, 0x20, 0x0, 0x1000, 0x6, 0x10001, 0x9, 0xf, 0x9, 0x3, 0x9, 0x6fb9, 0xfffffffffffff16a, 0x3, 0x7, 0x9, 0x5, 0x8, 0x644, 0x3f, 0x7, 0x9, 0x8, 0xa0, 0x6, 0xfffffffffffffffb, 0x7, 0xffffffffffffffff, 0x3d3, 0x10001, 0x24, 0x5, 0xffffffffffff8000, 0x8, 0x101, 0xff, 0x2, 0x4, 0x2, 0x8, 0x3, 0x4, 0x7, 0x0, 0x4, 0x80000001, 0x200000000000000, 0x6a8, 0x2, 0x80000000, 0x1, 0x101, 0x8e6, 0xe47, 0x81, 0x72f, 0x1f, 0x6, 0x9, 0x0, 0x3, 0x7ff, 0x92de, 0x4, 0x6e7, 0xffffffffffffff7f, 0x400, 0x7, 0x3, 0x5, 0xd8], "cc094c8e28662f8de94fa5289314bede62c8887d0bd5258f866c94da2589f68091c18df8980ef33bdae99eb928a7fcb9fe69f0c439da88d5336f5c75c16bdd1f42af77314604ba5c96d38051f0799db10a0bb516d2a310ec26636b553634d15b346e0763918f426a8ad397163e61d3c68adcf9a4f5fd17894c5b13a04f96e8e1262756bc4e2f51515b47af69bdf2b963fc6642e6d7b2e498a1e531c336fd36e30c"}}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) close(r0) 03:34:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x800000000000004) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:06 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:06 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x6, 0x1, 0xfffffffffffffffe, 'syz1\x00'}) r2 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r3, 0x2}, 0x8) 03:34:06 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x248, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r1) 03:34:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 03:34:06 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000003c0)="fdde2d324a59057e2addd70c1b87254173860f00915bf172e68f49fae0b8862fbd5fd055040a7b9dace9434cccbd7548be1497b1a7d5bf11f222d0b6f0f53afb13060f9dd92b1c9c5df1ef80ea2c0513197fecb07e0357679c149b8ebc34b1f4924f39ac4799163859e49715ba68b6832d28d45ad7ea5aac7aefbceec2c15c07bc0a922f1dec4886197553717f0df355504ba0cd245e0729abcbfc3bbf6951672bf40af82619f2ee2ef27f87d3ce", 0xae, 0xfffff00000000000, &(0x7f0000000180)={r3, r4+10000000}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200)=0x8) close(r0) 03:34:06 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:06 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="20f768ba011741275578377702"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x36, 0xa, 0x9, 0x2, "705b27d8cc5daa9263bd0f4d8d84a5d5ef9ca471a1ea032c760bca93c2fb91fc"}) 03:34:06 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @broadcast}}, 0x2, 0x2, 0x0, "b8096b7528d9996d34f81c05f9f34ae37c543d9a04009e825150eaeabd1dfd5a6507e3fde8a2b3d61b8697635e70be3eb905627d51758a99218466ff64fda53b5c83163c2eac5f229e3e0a099c7bca73"}, 0xd8) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$rds(0x15, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:07 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7ffff", 0x24) 03:34:07 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70003", 0x24) 03:34:07 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) getdents64(r0, &(0x7f0000000300)=""/155, 0x9b) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x10000, 0x1, 0xff, 0x8, 0x4, 0xaf, 0x4}, 0x20) recvfrom$unix(r0, &(0x7f0000000100)=""/211, 0xd3, 0x1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) write$P9_RSTAT(r0, &(0x7f00000003c0)={0x61, 0x7d, 0x2, {0x0, 0x5a, 0x7, 0x8, {0x27, 0x0, 0x2}, 0x8340000, 0x4, 0x6, 0xa74, 0xa, '/dev/vhci\x00', 0x0, "", 0x13, ')mime_type$security', 0xa, '/dev/vhci\x00'}}, 0x61) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$TCSBRKP(r0, 0x5425, 0xd8) close(r0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @remote}}, 0x1e) 03:34:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 03:34:08 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000140)) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000180)={@local}, &(0x7f0000000200)=0xc) close(r0) 03:34:08 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f1b8"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:08 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:08 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffbbfb5f28d5d6cabde43a82f349a64dd3c46b2531208a1fca0fcbc11243811dfafc0300"], 0x2) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) close(r0) 03:34:08 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:08 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d07d796014ea3a1ebd4d0aa3c730c249a5c258fe00021614751c89768f56b29ad16db9c89e6bf06b55f2fe4101c995ff22cedf85bbbb3b93007a11a260c69818a6f0a185f8ba8a6f32905b9fc6c40335c3376a520000000000000000e0337c9932fa16eb7500000000000000"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r2) 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {}, [{}], {}, [{}]}, 0x34, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000002c0)) 03:34:08 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r0], 0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCEXCL(r0, 0x540c) close(r0) 03:34:08 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 335.480277] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 03:34:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 335.653097] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 335.700120] overlayfs: filesystem on './file0' not supported as upperdir 03:34:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:09 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000040)=""/31, 0x1f) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d700ff", 0x24) 03:34:09 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 03:34:09 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000500)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1, 0x2, @thr={&(0x7f00000003c0)="a1455ad559a3ba298061309d9999ae801e1304ce706063f86ef952544f304b8082da2139a96b72df7bc011db48f69f1bb40b364de1b6413954000f721973313ffac7e02ac4bb2803c8c4c03bcd6e0ae85d6acac7e7a5ae00767c3621c95b659e1f812f00911e2ccb4d38084a4710077cee2b0a110db9a70f39a4690b8441b3e2ac1c0e671a64bf2e5e47ca4f8fdfe984c762363b3c69bda090dfebc6ca0ab74cc2a9f70d0c196aabba6ab10e96df70c21bbbee9a68ef0d985bad6c63450185e60e09fcb348bff308b11c69761201299e6e6f280ea3b95ed6", &(0x7f0000000200)="151111774a4e273376ff86f47ed79eea08d67f5e2ba8403f59b89c1858bd0765fea3b6672c5a5d7f448bb4ffde61d7e209353af39526fdcf4e302599683f35d376fab7d8"}}, &(0x7f00000004c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040), &(0x7f00000000c0)) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x258, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000140), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @rand_addr=0x1, @remote, 0x8}}}, {{@arp={@rand_addr=0x4, @broadcast, 0xff000000, 0xffffffff, @empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, @mac, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, 0x16e, 0x0, 0x0, 0x7, 0x7, 0x0, 'bridge_slave_0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x59}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@loopback, @multicast2, 0xffffffff, 0xffffff00, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x3ca1bccb0121919f, 0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x1d2d, 0x100, 0x2, 0x0, 0x10001, 0x0, 'veth0_to_bridge\x00', 'bond_slave_1\x00', {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @loopback, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:34:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d700fc", 0x24) 03:34:09 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d79eff", 0x24) 03:34:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7ffff", 0x24) 03:34:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 03:34:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:10 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x2, 0xfff, 0x6, 0x88f, 0x2, 0xe8, 0xffffffffffffffff, 0x7f, 0x0, 0x2}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x101840, 0x0) close(r0) 03:34:10 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x4, 0x3}) fcntl$dupfd(r0, 0x0, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:10 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 03:34:10 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d780fe", 0x24) 03:34:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:11 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7ffff", 0x24) 03:34:11 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="d77117622cdc3482f2c054b7ddfa7cfd9ac33ca8f6e4c8eed22ae2ec0000002cd46a0469004a2e126540b8f200000000000000"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:11 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 03:34:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:11 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70f00", 0x24) 03:34:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:12 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fd80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:34:12 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) pread64(r0, &(0x7f0000000480)=""/80, 0x50, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000500)="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") openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x4f, 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, r3, 0x0, 0x0, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x100000001}}}, 0xa0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70200", 0x24) 03:34:12 executing program 2: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000005c0), 0x4) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x0) sched_yield() 03:34:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) 03:34:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:12 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x10000, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:12 executing program 2: close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000000), 0x80003) 03:34:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70003", 0x24) 03:34:12 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ea9963cc062737f465fb8a38db1e3d786883e8007a4ef72bc0af5c16a8236e160b00000000000000000000000000000000000000"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000003bc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000000780)=""/155, 0x9b}], 0xa, &(0x7f0000000900)=""/250, 0xfa, 0x3}, 0xff}, {{&(0x7f0000000a00)=@alg, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000a80)=""/105, 0x69}, {&(0x7f0000000b00)=""/102, 0x66}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/92, 0x5c}], 0x4, &(0x7f0000001c40)=""/4096, 0x1000, 0xffff}, 0x1c0000000000000}, {{&(0x7f0000002c40)=@rc, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002cc0)=""/75, 0x4b}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)=""/136, 0x88}, {&(0x7f0000002e40)=""/127, 0x7f}, {&(0x7f0000002ec0)=""/206, 0xce}], 0x5, &(0x7f0000003040)=""/209, 0xd1, 0x40}, 0x6}, {{&(0x7f0000003140)=@sco, 0x80, &(0x7f0000003440)=[{&(0x7f00000031c0)=""/235, 0xeb}, {&(0x7f00000032c0)=""/75, 0x4b}, {&(0x7f0000003340)=""/216, 0xd8}], 0x3, &(0x7f0000003480)=""/120, 0x78, 0xc542}, 0x5}, {{&(0x7f0000003500)=@rc, 0x80, &(0x7f0000003780)=[{&(0x7f0000003580)=""/89, 0x59}, {&(0x7f0000003600)=""/5, 0x5}, {&(0x7f0000003640)=""/47, 0x2f}, {&(0x7f0000003680)=""/212, 0xd4}], 0x4, &(0x7f00000037c0)=""/104, 0x68, 0x7fff}, 0x1b}, {{&(0x7f0000003840)=@can, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/241, 0xf1}], 0x1, &(0x7f0000003a00)=""/13, 0xd, 0x2}, 0x8}], 0x6, 0x20, &(0x7f0000003c00)={r2, r3+10000000}) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:12 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r4, @ANYBLOB="000225bd7000fcdbdf250500000008000500ff0700004c000300080008000300000014000600fe8000000000000000000000000000181400020069705f7674693000000000000000210000080005000000000038000200080003000600000008000500d2000000080002004e24000008000900000000001400010000008f060000000000000000000000002000020014000100ff0200000000000000000000000000010800040000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x0, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70060", 0x24) 03:34:12 executing program 2: request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0xffffffffffffffff, 0x2}, &(0x7f0000000300)='\x00', 0x0) 03:34:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:12 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x3, 0xa, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) 03:34:13 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7f5ff", 0x24) 03:34:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) 03:34:13 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r1 = gettid() write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0), 0xa) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 03:34:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:13 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x400000, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff80e44532ca6cda2953638dbd94e5bd1031f3c203e937ac5b95031fd71a58281c5f50e6bf9562ef24997bd56bb90a75318fa958c52912eade8a0b55b547d6951373fae61d48474663a582e494f32ce26d372af546ba5d3d3c4f827e4093b0468b9838fc2ba51900d62385816f284282cbdc528f83b5c040ac33ea"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x1, 0x2, 0x2}}, 0x14) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000280)={0x2b, "5caf15dad460e8d40531163b9a2897150a974d3b7ea8144466d57d33a718d44feffc9c696482f3dd377a1a"}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x7, @mcast2, 0x1}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r2}, 0x8) close(r0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x8, 0xffffffff, 0xffffffff}) ioctl$TCXONC(r0, 0x540a, 0x4) 03:34:13 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x0, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:34:14 executing program 1: io_setup(0x5, &(0x7f0000000180)=0x0) io_pgetevents(r0, 0x100000003, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r1) 03:34:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70173", 0x24) 03:34:14 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xc) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000080)={0x9, 0x2, 0x1f, @local, 'bridge0\x00'}) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 03:34:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r1 = gettid() ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000040)=0x8) timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 03:34:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d76000", 0x24) 03:34:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:14 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r0) 03:34:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70300", 0x24) 03:34:14 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="fff3ef5cdd8070c8a00ac085c586c111dcc546442c8f570f5cda0498f09f211f531a90"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:34:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x0, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:15 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d20ef4faaa0000000000000000000000010058e638a2a495b46e45e080984f358bc5ca3a65a94884870b8ba535ff6b35253bcaae5c915c15611c234a91f3f631b8aaf00875d78da784a19b6131d6519639e1aa9b00d49260f35741000000"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x2, 0x4}) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x397, 0x2000) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) close(r0) msgget(0x2, 0x450) 03:34:15 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000500)=""/239) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) pipe2(&(0x7f0000000680), 0x84000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000300)=""/68) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="6f00000007872577b941d701e5f4550e1b276ed517b981e2599608485d10eacb193b8bc0aad4af37051eff8697d79dcbdb6088d4d2a08bc5690d385b18c7e6095a7e01adc82b93f7ced9df00628f1385cd3e58f2981a15b3cf88bdc787817879d93e85be1434622ceae754b79c06914e327a9cb4552fd7ed288c0a50cc1b01ed1048bd58d8e2948ad2af6cc7759e9ca342b2"], &(0x7f0000000440)=0x77) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000700)=""/143) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000480)={r4, 0x6, 0x4}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x7) close(r1) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000640)=[{{r5, r6/1000+30000}, 0x14, 0x7, 0x7}, {{0x77359400}, 0x5, 0x6, 0xffff}], 0x30) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/109, &(0x7f0000000180)=0x6d) 03:34:15 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x0) 03:34:15 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:15 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:15 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYPTR64]], 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:16 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) write$P9_RWSTAT(r1, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) r3 = gettid() sched_getattr(r3, &(0x7f0000000180), 0x30, 0x0) close(r0) 03:34:16 executing program 2: request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0xffffffffffffffff, 0x48}, &(0x7f0000000300)='\x00', 0x0) 03:34:16 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7ffff", 0x24) 03:34:16 executing program 2: add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 03:34:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:34:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:17 executing program 4: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) finit_module(r0, &(0x7f0000000040)='/dev/vhci\x00', 0x3) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 03:34:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x58, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000300)={r0, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) 03:34:17 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:17 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x9, 0x4) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000003) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = dup2(0xffffffffffffffff, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:34:17 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7f000", 0x24) 03:34:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001d000f000000000000ee0000050000f0976d454e5194106a6637ccb0c4aa1a5a21b055cc32"], 0x1}}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{0x1, 0x100000001, 0x5, 0x4545}, {0x100000000, 0x20000000000, 0x87e5, 0x8}, {0x8, 0x7, 0x8, 0x80000000}, {0x3f, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x2, 0x1000}]}, 0x8) shutdown(0xffffffffffffffff, 0x1) 03:34:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x58, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) 03:34:17 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7fec0", 0x24) 03:34:17 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x4, 0x1, 0x80000001, 0x9e, 'syz0\x00', 0x3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x8) 03:34:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40040403) dup2(r0, r1) 03:34:18 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x20605, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) socketpair(0x9, 0xa, 0x1, &(0x7f0000000140)) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:18 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:18 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[], 0xff07) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) close(r0) 03:34:18 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x7, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, @dev}, 0x12) 03:34:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = dup2(0xffffffffffffffff, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:34:18 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7f0ff", 0x24) 03:34:18 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40040403) dup2(r0, r1) 03:34:18 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_inet_SIOCGARP(r0, 0x2401, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="4a1d0a64d0f0"}, 0x0, {}, 'team0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:34:18 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7fc00", 0x24) 03:34:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d77301", 0x24) 03:34:19 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000300)=""/68) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000140)=""/94, &(0x7f0000000200)=0x5e) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7) close(r1) 03:34:19 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="ff807ad0ff9086dbfe1bf68018c0d838aede36e69c725de66758814a9d8a5b0100ee43c8b2da5606ac98c02259cc27f0b4cf460b07555f71b120"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffffffffffffc}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x3f, 0x3, 0x3ff, 0x9, 0x4, 0x7fe, 0x2, r2}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x8, 0x0, 0x6}, 0x2f}}, 0x18) close(r0) 03:34:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7fcff", 0x24) 03:34:19 executing program 2: request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='}\x00', 0x0) 03:34:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:19 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f80795a5880ce8b1633cff55c6fa7ef5037df1327795b1d090de5ea4927"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readahead(r0, 0x1ff, 0xfffffffffffffe70) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x4002) close(r0) 03:34:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = dup2(0xffffffffffffffff, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:34:19 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0xfffffffffffffc52) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x3, 0x9, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/216}, 0x18) 03:34:19 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r1, &(0x7f0000000040)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, r2}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7d705", 0x24) 03:34:19 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:34:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70040", 0x24) 03:34:19 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="3b0fe637370fd7542fd08944b9182c02e49ffbe3912efe87910614393005fa51e8af2c940645e034d30a235558702226c8dcee2d2e58ab7b967491e09c52370af73f263fb4399eba") 03:34:19 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0x80000) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:20 executing program 2: recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/27, 0x1b}], 0x1, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000024d, 0x0) 03:34:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 03:34:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:21 executing program 1: io_setup(0x8000, &(0x7f0000000180)=0x0) io_pgetevents(r0, 0x7fff, 0x0, &(0x7f00000003c0), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={0xfffffffffffffffe}, 0x8}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) accept$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={r2, @broadcast}, 0xc) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000700)=""/4096) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000300)=""/68) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000140)={0x81, 0x500000, 0x800000000000000, 0xffffffffffff8000, 0x1, 0x9}) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000280)=0x0) ptrace(0x10, r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0x7) close(r1) 03:34:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:34:21 executing program 2: recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/27, 0x1b}], 0x1, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0), 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000024d, 0x0) 03:34:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:21 executing program 3: r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, r2}, 0x345) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) flistxattr(r0, &(0x7f0000000080)=""/12, 0xc) close(r0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x5) write$P9_RRENAME(r0, &(0x7f0000000040)={0xfffffffffffffedb, 0x15, 0x1}, 0x7) 03:34:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d7003f", 0x24) 03:34:21 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000002300)=ANY=[@ANYRES32=r0, @ANYBLOB="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"], @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR64], @ANYRES16=0x0, @ANYRESDEC], @ANYPTR64, @ANYRESHEX=r0, @ANYRES32=r0], 0x42) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000140)=""/78) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_bt_hci(r1, 0x400448fe, &(0x7f0000000280)="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") close(r0) 03:34:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:21 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) 03:34:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:21 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x103101, 0x0) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14}, 0xfffffffe) 03:34:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:22 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40010) close(r0) 03:34:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000fc0)='./file0/../file0\x00', &(0x7f0000001000)='./file0/../file0/file0\x00') 03:34:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:27 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) close(r0) 03:34:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}) 03:34:27 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000100)=""/185) close(r0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x3}, 0x18) 03:34:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000580)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee02000000142b00bde252c50d2ef78d4ec26eade9b2ce4b793836c0d9fff0b32b3f36528a1b105ae842d7f1f82a91952bde6bf16e1c5e8c7fc731dc292b3e08c4b42b4185282f9d3e72acacda31ba142e0105f797cd6262134d5f09f56c70ceb415b27ae90706228a12b812fc2becaea9f6a09271732610e463cb751af126eb97e4ab001b1e71e6fe2b61fca037c38fc92557e570f99b263f325d03261c6504fce92bce9ac652a39c77f791a14bf7", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000000080)={0x0, 0x0, 0x9}, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000440), 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) 03:34:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:27 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 03:34:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 03:34:27 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x9}) [ 354.875570] ================================================================== [ 354.883166] BUG: KASAN: use-after-free in kobject_put+0xcb/0xe0 [ 354.889245] Read of size 1 at addr ffff88018515a3cc by task syz-executor4/11682 [ 354.896702] [ 354.898346] CPU: 1 PID: 11682 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #290 [ 354.905704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.905717] Call Trace: [ 354.905743] dump_stack+0x1c4/0x2b4 03:34:27 executing program 1: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2006, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) r2 = accept4(r1, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffc, 0x7, 0x0, 0x100000000000000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000000, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, r1, 0x0) timer_settime(0x0, 0x3, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f0000000200)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x7) close(r0) r3 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="9314aa1614b06814de2947fadfbb7403655dcb3b816e896ae646dc3e8481dd4cb8623f2a3b7382e4f96110ca9531b30e99f9f57d08ef3784d6054890c45d", 0x3e, 0xfffffffffffffff8) r4 = add_key(&(0x7f0000000240)='.dead\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) [ 354.905765] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.905783] ? printk+0xa7/0xcf [ 354.905802] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 354.905826] ? vhci_close_dev+0x50/0x50 [ 354.905842] print_address_description.cold.8+0x9/0x1ff [ 354.905859] ? vhci_close_dev+0x50/0x50 [ 354.905879] kasan_report.cold.9+0x242/0x309 [ 354.952394] ? kobject_put+0xcb/0xe0 [ 354.956132] __asan_report_load1_noabort+0x14/0x20 [ 354.961078] kobject_put+0xcb/0xe0 [ 354.964643] ? vhci_close_dev+0x50/0x50 [ 354.968635] put_device+0x20/0x30 [ 354.972109] hci_free_dev+0x19/0x20 [ 354.975758] vhci_release+0x7e/0xf0 [ 354.979405] __fput+0x385/0xa30 [ 354.982719] ? get_max_files+0x20/0x20 [ 354.986622] ? trace_hardirqs_on+0xbd/0x310 [ 354.990957] ? kasan_check_read+0x11/0x20 [ 354.995123] ? task_work_run+0x1af/0x2a0 [ 354.999200] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 354.999231] ? kasan_check_write+0x14/0x20 [ 354.999252] ? do_raw_spin_lock+0xc1/0x200 [ 354.999270] ____fput+0x15/0x20 [ 354.999288] task_work_run+0x1e8/0x2a0 [ 355.013224] ? task_work_cancel+0x240/0x240 [ 355.024696] ? copy_fd_bitmaps+0x210/0x210 [ 355.028953] ? do_syscall_64+0x9a/0x820 [ 355.032966] exit_to_usermode_loop+0x318/0x380 [ 355.037578] ? syscall_slow_exit_work+0x520/0x520 [ 355.042445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.048005] do_syscall_64+0x6be/0x820 [ 355.051916] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 355.057298] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.062258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.067116] ? trace_hardirqs_on_caller+0x310/0x310 03:34:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 355.072147] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 355.072165] ? prepare_exit_to_usermode+0x291/0x3b0 [ 355.072187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.072223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.072238] RIP: 0033:0x411021 [ 355.072260] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 355.114395] RSP: 002b:00007ffc03715460 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 03:34:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d700f0", 0x24) [ 355.122125] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 355.129406] RDX: 0000000000000000 RSI: 0000000000730348 RDI: 0000000000000003 [ 355.136693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.143972] R10: 0000000000730338 R11: 0000000000000293 R12: 0000000000000000 [ 355.151263] R13: 0000000000000001 R14: 000000000000003c R15: 0000000000000004 [ 355.158561] [ 355.160200] Allocated by task 11686: [ 355.163940] save_stack+0x43/0xd0 [ 355.167409] kasan_kmalloc+0xc7/0xe0 [ 355.171136] kmem_cache_alloc_trace+0x152/0x750 [ 355.175826] hci_alloc_dev+0x228/0x2120 [ 355.179818] __vhci_create_device+0x102/0x580 [ 355.184321] vhci_write+0x2de/0x470 [ 355.187967] __vfs_write+0x6b8/0x9f0 [ 355.191705] vfs_write+0x1fc/0x560 [ 355.195261] ksys_write+0x101/0x260 [ 355.198902] __x64_sys_write+0x73/0xb0 [ 355.202808] do_syscall_64+0x1b9/0x820 [ 355.206710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.211901] [ 355.213537] Freed by task 11682: [ 355.216920] save_stack+0x43/0xd0 [ 355.220383] __kasan_slab_free+0x102/0x150 [ 355.224630] kasan_slab_free+0xe/0x10 [ 355.228440] kfree+0xcf/0x230 [ 355.231564] bt_host_release+0x19/0x30 [ 355.235461] device_release+0x7e/0x210 [ 355.239373] kobject_put.cold.9+0x287/0x2e4 [ 355.243723] put_device+0x20/0x30 [ 355.247192] hci_unregister_dev+0x71d/0x990 [ 355.251536] vhci_release+0x76/0xf0 [ 355.255170] __fput+0x385/0xa30 [ 355.258460] ____fput+0x15/0x20 [ 355.261751] task_work_run+0x1e8/0x2a0 [ 355.265842] exit_to_usermode_loop+0x318/0x380 [ 355.270441] do_syscall_64+0x6be/0x820 [ 355.274343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.279543] [ 355.281180] The buggy address belongs to the object at ffff880185159300 [ 355.281180] which belongs to the cache kmalloc-8192 of size 8192 [ 355.294065] The buggy address is located 4300 bytes inside of [ 355.294065] 8192-byte region [ffff880185159300, ffff88018515b300) [ 355.306137] The buggy address belongs to the page: [ 355.311086] page:ffffea0006145600 count:1 mapcount:0 mapping:ffff8801da802080 index:0x0 compound_mapcount: 0 [ 355.321080] flags: 0x2fffc0000008100(slab|head) [ 355.325771] raw: 02fffc0000008100 ffffea0006211e08 ffffea0006156408 ffff8801da802080 [ 355.333678] raw: 0000000000000000 ffff880185159300 0000000100000001 0000000000000000 [ 355.341569] page dumped because: kasan: bad access detected [ 355.347294] [ 355.348926] Memory state around the buggy address: [ 355.353872] ffff88018515a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.361258] ffff88018515a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.368635] >ffff88018515a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 03:34:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 355.376301] ^ [ 355.382032] ffff88018515a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.389416] ffff88018515a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.396790] ================================================================== [ 355.404162] Disabling lock debugging due to kernel taint [ 355.416935] Kernel panic - not syncing: panic_on_warn set ... [ 355.416935] [ 355.424374] CPU: 1 PID: 11682 Comm: syz-executor4 Tainted: G B 4.19.0-rc8+ #290 [ 355.433125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.442492] Call Trace: [ 355.445107] dump_stack+0x1c4/0x2b4 [ 355.448750] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.453956] ? vhci_close_dev+0x50/0x50 [ 355.457953] panic+0x238/0x4e7 [ 355.461164] ? add_taint.cold.5+0x16/0x16 [ 355.465329] ? preempt_schedule+0x4d/0x60 [ 355.469489] ? ___preempt_schedule+0x16/0x18 [ 355.473911] ? trace_hardirqs_on+0xb4/0x310 [ 355.478259] ? vhci_close_dev+0x50/0x50 [ 355.482255] kasan_end_report+0x47/0x4f [ 355.486250] kasan_report.cold.9+0x76/0x309 [ 355.490581] ? kobject_put+0xcb/0xe0 [ 355.494314] __asan_report_load1_noabort+0x14/0x20 [ 355.499259] kobject_put+0xcb/0xe0 [ 355.502817] ? vhci_close_dev+0x50/0x50 [ 355.506802] put_device+0x20/0x30 [ 355.510264] hci_free_dev+0x19/0x20 [ 355.513908] vhci_release+0x7e/0xf0 [ 355.517542] __fput+0x385/0xa30 [ 355.520832] ? get_max_files+0x20/0x20 [ 355.524730] ? trace_hardirqs_on+0xbd/0x310 [ 355.529059] ? kasan_check_read+0x11/0x20 [ 355.533230] ? task_work_run+0x1af/0x2a0 [ 355.537309] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 355.542773] ? kasan_check_write+0x14/0x20 [ 355.547019] ? do_raw_spin_lock+0xc1/0x200 [ 355.551269] ____fput+0x15/0x20 [ 355.554557] task_work_run+0x1e8/0x2a0 [ 355.558454] ? task_work_cancel+0x240/0x240 [ 355.562793] ? copy_fd_bitmaps+0x210/0x210 [ 355.567046] ? do_syscall_64+0x9a/0x820 [ 355.571042] exit_to_usermode_loop+0x318/0x380 [ 355.575636] ? syscall_slow_exit_work+0x520/0x520 [ 355.580490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.586042] do_syscall_64+0x6be/0x820 [ 355.589951] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 355.595332] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.600269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.605127] ? trace_hardirqs_on_caller+0x310/0x310 [ 355.610168] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 355.615205] ? prepare_exit_to_usermode+0x291/0x3b0 [ 355.620261] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:34:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 355.625123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.630326] RIP: 0033:0x411021 [ 355.633530] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 355.648431] kobject: 'loop5' (0000000088931991): kobject_uevent_env [ 355.652437] RSP: 002b:00007ffc03715460 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 355.652453] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411021 [ 355.652461] RDX: 0000000000000000 RSI: 0000000000730348 RDI: 0000000000000003 [ 355.652469] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.652477] R10: 0000000000730338 R11: 0000000000000293 R12: 0000000000000000 [ 355.652485] R13: 0000000000000001 R14: 000000000000003c R15: 0000000000000004 [ 355.659761] Kernel Offset: disabled [ 355.707338] Rebooting in 86400 seconds..