Extracting prog: 20.483420891s Minimizing prog: 51m0.163805415s Simplifying prog options: 1m52.212953464s Extracting C: 38.190651211s Simplifying C: 0s extracting reproducer from 31 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program crashed: WARNING: locking bug in __set_page_owner single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) shutdown(r9, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) shutdown(r9, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, 0xffffffffffffffff, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r2, @ANYRESDEC=r2], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC=r2], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC=r2], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC=r2], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC=r2], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r3, 0x0, 0x2000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r5 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r5, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r7, 0x7d57, '\x00', 0x0, r6, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) shutdown(r10, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(0x0, 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, 0x0, 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) shutdown(r9, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000c1eecf5e8d03bd5b734185140c8ed5c12e17535973ff89fb909e4e6e95bb8f1ae8f2e39ca4208bf66a62b4d72b75bcf56e34ac48734c69dc1749cf8b3b3c3c08fefb7c6e1fe58e293356a2cac281001823a8ce889644198fbf9e6506df665a09e5ab143b7a1b6e1629a3fc5ac95a94cfe2a6dd4fd9e20f82bc1da1e25aa5385783e48e9efc4fc102e10bc3b93e6723aa9238b218b833e96d120cc8f620e1953a506d7df9cb91bbce15deaa567977fcb3c64b042cea24950bcc4d925f2f6dbfcf9640f266da7d3913bfe39e65112b90f7a20f4869be03f6992b71c68b32f36f7d3e6ce3282f3197348d8a59ede27e30d07b85824a9d5bffb6afa420f8d11c4bfcc636edc25fdaadae6687ecaf072c2c1f578cba678eb27866e24f56e0a7522f495d940c8a542d9f7b8f9379180276013c4e431faf892af38f48399c05fa26cf00922b44d45d09af23a333dbad0a03a4112761097f1732ff4ec0b747b919d16c528eb52966ebc0b6ae4ecea40ac2eb9ffb24653fbd037e", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, 0x0, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, 0x0, 0x0) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown program did not crash simplifying guilty program options testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-bpf$MAP_CREATE-bpf$MAP_UPDATE_BATCH-bpf$PROG_LOAD-bpf$PROG_LOAD-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_SELECT-ioctl$SNDRV_TIMER_IOCTL_PARAMS-epoll_create1-open-mkdirat-bpf$BPF_BTF_GET_FD_BY_ID-bpf$BPF_MAP_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD_XDP-bpf$MAP_CREATE_RINGBUF-openat$procfs-openat$sysctl-sendfile-openat$sysctl-socket$unix-bind$unix-listen-shutdown detailed listing: executing program 0: syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xc, 0xc9, 0xfa, 0x9, "90ccaab9173e3d9c"}}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000020e27f000001b816d619dac2fdb1284bb38829b100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000280), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="373074df42646ebe759bb7690434fa84e80502ed4470be49a567496d9a3833016b510c4c94aeb25454833545d62f26d99e39f7236449c129a047af87153802fc746a10cb42cf353e750c57766cc2fa0eb10b2c6da04faf14b2204129bbba03156fb206d27a680f2e628b8be80cee3bde12a16c558414181cad7765be692e9dad72a843bbe80c4421418bcb980a83dddc6bcb9d5f5d94f6d65515be24f2bc2a1c0e4d4d1500d9f0465fc952007a23caaf079bd60f5e341179297491b43f65fc571eb95ec3f696fde641", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r3], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0x2000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) epoll_create1(0x0) r6 = open(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0/file0\x00', 0x101082, 0xdd) mkdirat(r6, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x81, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000004000000040000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@ldst={0x2, 0x3, 0x2, 0xa, 0x6, 0xffffffffffffffc0, 0x10}, @alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2000004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x24debe6b, 0x0, r8, 0x7d57, '\x00', 0x0, r7, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x9) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r11, 0x0) shutdown(r11, 0x0) program did not crash reproducing took 53m51.050850529s repro crashed as (corrupted=false): ============================= [ BUG: Invalid wait context ] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted ----------------------------- sshd/5938 is trying to lock: ffffffff8e3a6638 (stack_list_lock){-.-.}-{3:3}, at: add_stack_record_to_list mm/page_owner.c:182 [inline] ffffffff8e3a6638 (stack_list_lock){-.-.}-{3:3}, at: inc_stack_record_count mm/page_owner.c:214 [inline] ffffffff8e3a6638 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 other info that might help us debug this: context-{2:2} 3 locks held by sshd/5938: #0: ffff888032bcb3d0 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:717 [inline] #0: ffff888032bcb3d0 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278 #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: count_memcg_events_mm.constprop.0+0x3a/0x340 include/linux/memcontrol.h:994 #2: ffff88806a63ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598 stack backtrace: CPU: 0 UID: 0 PID: 5938 Comm: sshd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5176 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558 prep_new_page mm/page_alloc.c:1566 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753 alloc_pages_mpol_noprof+0x2c8/0x620 mm/mempolicy.c:2269 stack_depot_save_flags+0x8aa/0x9c0 lib/stackdepot.c:627 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:544 task_work_add+0xc0/0x3b0 kernel/task_work.c:77 task_tick_numa kernel/sched/fair.c:3616 [inline] task_tick_fair+0x524/0x8e0 kernel/sched/fair.c:13101 sched_tick+0x1dd/0x4f0 kernel/sched/core.c:5652 update_process_times+0x19c/0x2d0 kernel/time/timer.c:2524 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x376/0x530 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x5fb/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire.part.0+0x155/0x380 kernel/locking/lockdep.c:5814 Code: b8 ff ff ff ff 65 0f c1 05 40 b0 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 RSP: 0000:ffffc90006547d60 EFLAGS: 00000206 RAX: 0000000000000046 RBX: 1ffff92000ca8fad RCX: 000000000b2f76db RDX: 0000000000000001 RSI: ffffffff8b6cdce0 RDI: ffffffff8bd21860 RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dcaf98 R10: ffffffff96e57cc7 R11: 0000000000000001 R12: 0000000000000000 R13: ffffffff8e1bb900 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] count_memcg_events_mm.constprop.0+0x40/0x340 include/linux/memcontrol.h:994 count_memcg_event_mm include/linux/memcontrol.h:1004 [inline] mm_account_fault mm/memory.c:5978 [inline] handle_mm_fault+0x5cc/0xaa0 mm/memory.c:6138 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x557f2673e823 Code: 4c 89 ed 4c 89 e7 f3 aa eb 48 4c 89 e7 e8 95 48 f7 ff 48 89 c5 48 85 c0 74 38 48 89 c7 4c 89 ee 4d 39 f4 76 11 4c 89 f1 31 c0 a4 4c 89 e1 4c 29 f1 f3 aa eb 05 4c 89 e1 f3 a4 4c 89 ef 48 83 RSP: 002b:00007ffdd2740e90 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000320000 RCX: 00000000002e7010 RDX: 0000000000000002 RSI: 00007fb06e2b8000 RDI: 00007fb06df97000 RBP: 00007fb06df66010 R08: 00007fb06df66010 R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000320000 R13: 00007fb06e287010 R14: 0000000000318000 R15: 00007ffdd2741048 ---------------- Code disassembly (best guess): 0: b8 ff ff ff ff mov $0xffffffff,%eax 5: 65 0f c1 05 40 b0 8b xadd %eax,%gs:0x7e8bb040(%rip) # 0x7e8bb04d c: 7e d: 83 f8 01 cmp $0x1,%eax 10: 0f 85 d0 01 00 00 jne 0x1e6 16: 9c pushf 17: 58 pop %rax 18: f6 c4 02 test $0x2,%ah 1b: 0f 85 e5 01 00 00 jne 0x206 21: 48 85 ed test %rbp,%rbp 24: 0f 85 b6 01 00 00 jne 0x1e0 * 2a: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction 31: fc ff df 34: 48 01 c3 add %rax,%rbx 37: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 3e: 48 rex.W 3f: c7 .byte 0xc7 final repro crashed as (corrupted=false): ============================= [ BUG: Invalid wait context ] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted ----------------------------- sshd/5938 is trying to lock: ffffffff8e3a6638 (stack_list_lock){-.-.}-{3:3}, at: add_stack_record_to_list mm/page_owner.c:182 [inline] ffffffff8e3a6638 (stack_list_lock){-.-.}-{3:3}, at: inc_stack_record_count mm/page_owner.c:214 [inline] ffffffff8e3a6638 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 other info that might help us debug this: context-{2:2} 3 locks held by sshd/5938: #0: ffff888032bcb3d0 (&vma->vm_lock->lock){++++}-{4:4}, at: vma_start_read include/linux/mm.h:717 [inline] #0: ffff888032bcb3d0 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 mm/memory.c:6278 #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: count_memcg_events_mm.constprop.0+0x3a/0x340 include/linux/memcontrol.h:994 #2: ffff88806a63ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:598 stack backtrace: CPU: 0 UID: 0 PID: 5938 Comm: sshd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5176 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x3ea/0x560 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1558 prep_new_page mm/page_alloc.c:1566 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3476 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4753 alloc_pages_mpol_noprof+0x2c8/0x620 mm/mempolicy.c:2269 stack_depot_save_flags+0x8aa/0x9c0 lib/stackdepot.c:627 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:544 task_work_add+0xc0/0x3b0 kernel/task_work.c:77 task_tick_numa kernel/sched/fair.c:3616 [inline] task_tick_fair+0x524/0x8e0 kernel/sched/fair.c:13101 sched_tick+0x1dd/0x4f0 kernel/sched/core.c:5652 update_process_times+0x19c/0x2d0 kernel/time/timer.c:2524 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x376/0x530 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x5fb/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire.part.0+0x155/0x380 kernel/locking/lockdep.c:5814 Code: b8 ff ff ff ff 65 0f c1 05 40 b0 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 RSP: 0000:ffffc90006547d60 EFLAGS: 00000206 RAX: 0000000000000046 RBX: 1ffff92000ca8fad RCX: 000000000b2f76db RDX: 0000000000000001 RSI: ffffffff8b6cdce0 RDI: ffffffff8bd21860 RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dcaf98 R10: ffffffff96e57cc7 R11: 0000000000000001 R12: 0000000000000000 R13: ffffffff8e1bb900 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] count_memcg_events_mm.constprop.0+0x40/0x340 include/linux/memcontrol.h:994 count_memcg_event_mm include/linux/memcontrol.h:1004 [inline] mm_account_fault mm/memory.c:5978 [inline] handle_mm_fault+0x5cc/0xaa0 mm/memory.c:6138 do_user_addr_fault+0x60d/0x13f0 arch/x86/mm/fault.c:1338 handle_page_fault arch/x86/mm/fault.c:1481 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1539 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x557f2673e823 Code: 4c 89 ed 4c 89 e7 f3 aa eb 48 4c 89 e7 e8 95 48 f7 ff 48 89 c5 48 85 c0 74 38 48 89 c7 4c 89 ee 4d 39 f4 76 11 4c 89 f1 31 c0 a4 4c 89 e1 4c 29 f1 f3 aa eb 05 4c 89 e1 f3 a4 4c 89 ef 48 83 RSP: 002b:00007ffdd2740e90 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000320000 RCX: 00000000002e7010 RDX: 0000000000000002 RSI: 00007fb06e2b8000 RDI: 00007fb06df97000 RBP: 00007fb06df66010 R08: 00007fb06df66010 R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000320000 R13: 00007fb06e287010 R14: 0000000000318000 R15: 00007ffdd2741048 ---------------- Code disassembly (best guess): 0: b8 ff ff ff ff mov $0xffffffff,%eax 5: 65 0f c1 05 40 b0 8b xadd %eax,%gs:0x7e8bb040(%rip) # 0x7e8bb04d c: 7e d: 83 f8 01 cmp $0x1,%eax 10: 0f 85 d0 01 00 00 jne 0x1e6 16: 9c pushf 17: 58 pop %rax 18: f6 c4 02 test $0x2,%ah 1b: 0f 85 e5 01 00 00 jne 0x206 21: 48 85 ed test %rbp,%rbp 24: 0f 85 b6 01 00 00 jne 0x1e0 * 2a: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction 31: fc ff df 34: 48 01 c3 add %rax,%rbx 37: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 3e: 48 rex.W 3f: c7 .byte 0xc7