tl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x7, 0x0, {{0xd, 'pids.current\x00'}, 0x1000}}, 0x1a) 22:44:16 executing program 3: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x34e1, 0x0) mlockall(0x1) syz_open_procfs(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:44:16 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 275.818002][T10251] BPF:[1] ENUM (anon) [ 275.826071][T10251] BPF: [ 275.829188][T10251] BPF:meta_left:36 meta_needed:440 [ 275.835495][T10251] BPF: [ 275.835495][T10251] 22:44:16 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:16 executing program 4: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"/709], &(0x7f0000004600)=""/210, 0x4f, 0x193, 0x8}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ppoll(&(0x7f0000000140)=[{}], 0x1, &(0x7f0000000240), 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x7, 0x0, {{0xd, 'pids.current\x00'}, 0x1000}}, 0x1a) [ 275.863991][T10257] BPF:[1] ENUM (anon) [ 275.868299][T10257] BPF: [ 275.871264][T10257] BPF:meta_left:36 meta_needed:440 [ 275.877747][T10257] BPF: [ 275.877747][T10257] [ 276.035537][T10269] BPF:[1] ENUM (anon) [ 276.041632][T10269] BPF: [ 276.044774][T10269] BPF:meta_left:36 meta_needed:440 [ 276.052022][T10269] BPF: [ 276.052022][T10269] 22:44:17 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00'}) 22:44:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:17 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 276.587724][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.620676][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.646698][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 22:44:17 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:44:17 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:17 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) [ 276.689727][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.701125][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.710645][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.719826][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.728536][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.739656][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.748965][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.757632][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.773343][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.782527][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.805763][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.815385][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.823741][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.842631][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 22:44:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x38}}], 0x1, 0x0) [ 276.850506][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.858695][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 22:44:17 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) [ 276.925965][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 276.956932][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 22:44:18 executing program 3: r0 = socket(0x1d, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) 22:44:18 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) [ 277.026135][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 277.051647][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 277.066189][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8510 returned -22 [ 277.104077][T10292] binder: 10289:10292 ioctl 4020ae46 7f19464f8530 returned -22 [ 277.199357][T10333] binder: 10289:10333 ioctl 8138ae83 7f19464b66f0 returned -22 22:44:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}]}) [ 277.447097][T10342] FAT-fs (loop3): bogus number of reserved sectors [ 277.490323][T10342] FAT-fs (loop3): Can't find a valid FAT filesystem 22:44:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:20 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:20 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000cf6e00c3567ddfa02e0695a4ec3413fcb7b29998e2d3317963aa3013eb16f6c08661592c9f60cbccdb0ea62c68e7c1252d7abf792f7bc95dfc23e20737acdb0f34f844ac3154f9fc57c9c81c3eb7981cfae8ab69ea7d5a1e778ecd522858969721e86f63b1c8bb259f2afdc10f87000000000000f600004f10d5c0000000ffffffffffffffff086c20923d80c1e606b8b99a2579663ffc9178d97efbdd4cc96a7c5275b200c26751ff6c53cc4a3c6b4b4102852758767e4de8d257e9c8f99f35e709c595151864a979a8ce000000"], 0x8) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r2, r1, 0x0) 22:44:20 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:20 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:20 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 279.455258][T10361] dccp_close: ABORT with 20 bytes unread 22:44:20 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:20 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 279.524181][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.544309][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.544964][T10355] dccp_close: ABORT with 20 bytes unread [ 279.553811][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 22:44:20 executing program 3: pause() r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) [ 279.645299][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 22:44:20 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) ptrace$getsig(0x420d, 0x0, 0xffffffffff600043, 0x0) [ 279.717509][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.756234][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.782539][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.797724][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.807339][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 22:44:20 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) [ 279.846204][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.881222][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.899272][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.911144][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.924868][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.936387][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.944646][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.954500][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.963003][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.971088][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.979781][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 279.993935][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 280.005465][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 280.014257][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 280.025760][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7510 returned -22 [ 280.036017][T10369] binder: 10353:10369 ioctl 4020ae46 7f19464d7530 returned -22 22:44:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:23 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:23 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:23 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) ptrace$getsig(0x420d, 0x0, 0xffffffffff600043, 0x0) 22:44:23 executing program 3: 22:44:23 executing program 3: [ 282.658973][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.669593][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.680451][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.689119][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.698283][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 22:44:23 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:23 executing program 3: [ 282.739314][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.775850][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.811999][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.827292][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.843760][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.852437][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 22:44:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x14a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) [ 282.876923][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.905799][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 22:44:23 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) [ 282.938534][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.946987][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.955258][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 282.964048][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.021872][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.053259][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.075193][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.085320][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.094854][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.106052][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.115026][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8510 returned -22 22:44:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 283.124446][T10415] binder: 10411:10415 ioctl 4020ae46 7f19464f8530 returned -22 [ 283.384578][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.393496][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.402292][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.412150][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.421653][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.431019][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.440368][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.449497][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.481637][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.490807][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.506793][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.515500][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.526913][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.534848][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.542863][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.550700][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.559683][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.568619][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.576446][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.584549][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.592354][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.600068][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.607875][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.615626][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8510 returned -22 [ 283.623582][T10457] binder: 10455:10457 ioctl 4020ae46 7f19464f8530 returned -22 22:44:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:26 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:26 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) ptrace$getsig(0x420d, 0x0, 0xffffffffff600043, 0x0) 22:44:26 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:26 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:26 executing program 3: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000002c0)=@md5={0x1, "b4732bbc83575fedb55f74639d0d0304"}, 0x11, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800003300056bd23080648c63940d0324fc60100000000a000000053582c137153e370907018048f01700d1bd", 0x33fe0}], 0x1}, 0x0) 22:44:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:27 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:27 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 22:44:27 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:29 executing program 3: 22:44:29 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:29 executing program 5: r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:29 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:29 executing program 3: 22:44:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:30 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:30 executing program 3: 22:44:30 executing program 3: 22:44:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:32 executing program 3: 22:44:32 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:32 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:32 executing program 5: r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:32 executing program 3: 22:44:33 executing program 3: 22:44:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:33 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:33 executing program 3: 22:44:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:33 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:33 executing program 3: 22:44:33 executing program 3: 22:44:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r1, r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:35 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:35 executing program 3: 22:44:35 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:35 executing program 5: r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:36 executing program 3: [ 295.163259][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.171115][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.188891][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.196900][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.209018][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.231740][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.243521][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.253055][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 22:44:36 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) [ 295.266095][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.274800][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.284409][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.293133][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 22:44:36 executing program 3: [ 295.332361][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.360674][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.380808][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.390859][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.399378][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.408065][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.417760][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 22:44:36 executing program 3: [ 295.428141][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.438354][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.449054][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.457471][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.466216][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.475043][T10634] binder: 10626:10634 ioctl 4020ae46 7f19464f8530 returned -22 22:44:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r1, r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:36 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) [ 295.713522][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.729871][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.739346][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.747664][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.757903][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.766473][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.775074][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.783436][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.793328][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.801620][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.809970][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.819025][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.827508][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.837663][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.866821][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.876358][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.884866][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.893522][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.903216][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.936574][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.945041][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.956197][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 295.964959][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 296.002652][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8510 returned -22 [ 296.041668][T10659] binder: 10658:10659 ioctl 4020ae46 7f19464f8530 returned -22 22:44:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:39 executing program 3: 22:44:39 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:39 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:39 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nobh='nobh'}, {@delalloc='delalloc'}]}) 22:44:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r1, r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:39 executing program 3: 22:44:39 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, 0x0) [ 298.297233][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.331730][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 22:44:39 executing program 3: [ 298.353985][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.391713][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.406014][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.414941][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 22:44:39 executing program 3: [ 298.458465][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.477038][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.485629][T10701] EXT4-fs (sda1): re-mounted. Opts: [ 298.493532][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 22:44:39 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, 0x0) [ 298.511564][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.519792][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.550129][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 22:44:39 executing program 3: [ 298.647023][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.680300][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.706738][T10709] EXT4-fs (sda1): re-mounted. Opts: [ 298.715662][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.737446][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.755779][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.804123][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.836986][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.846120][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.854877][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.864860][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.873225][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.881218][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8510 returned -22 [ 298.889657][T10683] binder: 10678:10683 ioctl 4020ae46 7f19464f8530 returned -22 [ 300.994826][ T0] NOHZ: local_softirq_pending 08 22:44:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:42 executing program 3: 22:44:42 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, 0x0) 22:44:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r1, r2) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:42 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:42 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:42 executing program 3: [ 301.329646][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.349735][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.353553][T10728] EXT4-fs (sda1): re-mounted. Opts: [ 301.384932][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.398969][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.411026][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 22:44:42 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}]}) [ 301.435158][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.459662][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 22:44:42 executing program 3: [ 301.494621][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.530958][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.544878][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.557233][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.576601][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.584687][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 22:44:42 executing program 3: [ 301.592864][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.600701][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.612076][T10742] EXT4-fs (sda1): Ignoring removed nobh option [ 301.651554][T10742] EXT4-fs (sda1): re-mounted. Opts: nobh, [ 301.672385][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.681538][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.689292][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.697149][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.704975][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.713099][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.721030][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 22:44:42 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}]}) 22:44:42 executing program 3: [ 301.751840][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.759598][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8510 returned -22 [ 301.817756][T10727] binder: 10723:10727 ioctl 4020ae46 7f19464f8530 returned -22 [ 301.920358][T10754] EXT4-fs (sda1): Ignoring removed nobh option [ 301.984701][T10754] EXT4-fs (sda1): re-mounted. Opts: nobh, 22:44:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r1, r2) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:45 executing program 3: 22:44:45 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@nobh='nobh'}]}) 22:44:45 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:45 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:45 executing program 3: [ 304.406454][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.421888][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.430057][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.439748][T10770] EXT4-fs (sda1): Ignoring removed nobh option [ 304.450600][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.459982][T10770] EXT4-fs (sda1): re-mounted. Opts: nobh, [ 304.470282][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.478715][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.486976][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.495742][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 22:44:45 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2b46434, &(0x7f00000000c0)={[{@delalloc='delalloc'}]}) [ 304.504165][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.527755][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 22:44:45 executing program 3: [ 304.572594][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.608580][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.620347][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.629757][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.639364][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.648330][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.658119][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.669332][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.699017][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.708703][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.714249][T10785] EXT4-fs (sda1): re-mounted. Opts: delalloc, [ 304.726346][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.734451][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 22:44:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r1, r2) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:45 executing program 3: [ 304.742714][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.750669][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.759727][T10774] binder: 10763:10774 ioctl 4020ae46 7f19464f8530 returned -22 22:44:45 executing program 1: [ 304.924551][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.941793][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.964609][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.976640][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 304.986847][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.005793][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.014952][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.027723][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.038307][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.050815][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.060595][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.074751][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.085074][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.096707][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.108075][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.118882][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.126891][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.134872][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.142829][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.150762][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.164249][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.172727][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.185758][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.195263][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8510 returned -22 [ 305.213627][T10795] binder: 10791:10795 ioctl 4020ae46 7f19464f8530 returned -22 22:44:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:48 executing program 3: 22:44:48 executing program 1: 22:44:48 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:48 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:48 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:48 executing program 3: 22:44:48 executing program 1: [ 307.453465][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.462626][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.472487][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.480528][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.488878][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.516001][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.526264][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.535946][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.549106][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.557555][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.581791][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.596328][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.605590][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.613995][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.624561][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 22:44:48 executing program 1: 22:44:48 executing program 3: [ 307.636592][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.645193][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.666212][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.684426][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.698551][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.708120][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.719396][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 22:44:48 executing program 1: [ 307.729812][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 [ 307.740364][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8510 returned -22 22:44:48 executing program 3: [ 307.789987][T10807] binder: 10804:10807 ioctl 4020ae46 7f19464f8530 returned -22 22:44:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:51 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:51 executing program 1: 22:44:51 executing program 3: 22:44:51 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:51 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:51 executing program 1: [ 310.546369][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.559843][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.569874][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.588142][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 22:44:51 executing program 3: [ 310.609985][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.619564][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.629333][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.638637][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.648434][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.659003][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 22:44:51 executing program 1: [ 310.701168][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.709567][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.738487][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 22:44:51 executing program 3: [ 310.769135][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.788967][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.799715][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.809289][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.818766][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.828767][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.837804][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.856808][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 22:44:51 executing program 1: [ 310.869098][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.890697][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 [ 310.900521][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8510 returned -22 22:44:51 executing program 1: [ 310.960605][T10839] binder: 10835:10839 ioctl 4020ae46 7f19464f8530 returned -22 22:44:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:54 executing program 3: 22:44:54 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:54 executing program 1: 22:44:54 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:54 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:54 executing program 1: 22:44:54 executing program 3: [ 313.729404][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.752152][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.773316][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.795987][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.825015][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.847251][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 22:44:54 executing program 1: 22:44:54 executing program 3: [ 313.877422][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.904862][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.920562][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.930456][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.940898][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.950833][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.964751][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 22:44:54 executing program 3: [ 313.976182][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.987698][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 313.998969][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.009397][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 22:44:54 executing program 1: [ 314.025160][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.079239][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.095043][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.104740][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.117504][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.130620][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.139531][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8510 returned -22 [ 314.153519][T10877] binder: 10869:10877 ioctl 4020ae46 7f19464f8530 returned -22 22:44:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:44:57 executing program 3: 22:44:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:44:57 executing program 1: 22:44:57 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:44:57 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:44:57 executing program 1: 22:44:57 executing program 3: [ 316.812306][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 316.826619][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 316.839862][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 316.862326][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 316.882042][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 316.903181][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 22:44:57 executing program 1: [ 316.921764][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 316.956853][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 316.979941][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 22:44:57 executing program 1: 22:44:57 executing program 3: [ 317.026495][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.057800][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.068403][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.076403][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.084408][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.092608][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.100341][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.110031][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.118068][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 22:44:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x132}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 317.168769][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.217767][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.230578][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.246068][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.272164][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.316808][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8510 returned -22 [ 317.326617][T10910] binder: 10901:10910 ioctl 4020ae46 7f19464f8530 returned -22 22:45:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="cf2aecf58a04d89c06000000000000001907f8022c3128d6c3867209fca9a5d9929c35189bdd88b4836842663709b16e0200ebec8410931c10a59b91f860d8cf431c025fe40e5e7e81", @ANYBLOB="a7b7b525328e92fad8556bc8405672662be6236747a6cdb02d4d678ce828c53466ba9d95a678640848d2e5fa8b4739d9fb4ec579bc7a30ec20e05a0b5dcfe211d1755be72e1234bc1e0a0078f6bb14b485a0d6b3724374261746f10994fa01a66be0fc9fd9bdfce251f154d450b76dc3f22a40ead024cce8"], 0x0, 0xd1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:45:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:00 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:45:00 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 319.884175][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.892624][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.900453][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.908877][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.920099][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.946539][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.955755][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.963785][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.972244][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.980092][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.988232][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 319.996160][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.004192][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.012114][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.019919][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.027926][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.036370][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.047468][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.056337][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.068553][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.077122][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.089113][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 22:45:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 320.097902][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.109379][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.118821][T10948] binder: 10939:10948 ioctl 4020ae46 7f19464f8530 returned -22 [ 320.191082][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.203951][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.212899][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.220654][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.229061][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 22:45:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r0, r1, 0x0, 0x1) [ 320.237682][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.245837][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.253770][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.263389][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.283007][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 22:45:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="cf2aecf58a04d89c06000000000000001907f8022c3128d6c3867209fca9a5d9929c35189bdd88b4836842663709b16e0200ebec8410931c10a59b91f860d8cf431c025fe40e5e7e81", @ANYBLOB="a7b7b525328e92fad8556bc8405672662be6236747a6cdb02d4d678ce828c53466ba9d95a678640848d2e5fa8b4739d9fb4ec579bc7a30ec20e05a0b5dcfe211d1755be72e1234bc1e0a0078f6bb14b485a0d6b3724374261746f10994fa01a66be0fc9fd9bdfce251f154d450b76dc3f22a40ead024cce8ffffffffffffff01cb156caaf2f5a8d666324c750d2a9236f921"], 0x0, 0xeb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 320.323446][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.360600][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.370276][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.385923][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.409604][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.419418][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.431030][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.440702][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.454200][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 22:45:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 320.469598][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.480265][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.490218][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.504663][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.517724][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.527695][T10959] binder: 10958:10959 ioctl 4020ae46 7f19464f8530 returned -22 22:45:01 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:45:01 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 320.608043][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.616711][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.624899][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.633156][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.641178][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.649529][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.657558][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.665550][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.675488][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.684338][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.692989][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.708483][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.717113][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 22:45:01 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 320.751749][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.777898][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.794569][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.812201][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.824020][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.834659][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.849719][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.857881][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.867071][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.875556][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.890968][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8510 returned -22 [ 320.913864][T10972] binder: 10971:10972 ioctl 4020ae46 7f19464f8530 returned -22 22:45:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:03 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:03 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:03 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, 0x0, 0xffffffffff600043, 0x0) 22:45:03 executing program 3: 22:45:03 executing program 3: 22:45:03 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, 0x0, 0xffffffffff600041, 0x0) [ 322.967086][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.000635][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.028801][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.049559][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.059777][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.088097][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.106826][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.117910][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.127143][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.135475][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.144213][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.153544][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.169866][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.177988][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.186088][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.194153][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.202532][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.210916][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.219041][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.227077][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.235794][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.244020][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.252921][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.260830][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.268975][T10998] binder: 10991:10998 ioctl 4020ae46 7f19464f8530 returned -22 22:45:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}}, 0x34}}, 0x0) 22:45:04 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe) 22:45:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 323.438752][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.471917][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.481186][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.504982][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.530863][T11019] tipc: Failed to obtain node identity [ 323.537985][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 22:45:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}}, 0x34}}, 0x0) [ 323.547222][T11019] tipc: Enabling of bearer rejected, failed to enable media [ 323.558539][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.574983][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.603548][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.615669][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.625246][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.642419][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 22:45:04 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, 0x0, 0xffffffffff600043, 0x0) [ 323.651877][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.662260][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.670429][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.728598][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.749452][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.761929][T11024] tipc: Failed to obtain node identity [ 323.770862][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.780535][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 323.815098][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.833092][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.851666][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.861777][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.869724][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.884472][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.914626][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8510 returned -22 [ 323.926605][T11015] binder: 11013:11015 ioctl 4020ae46 7f19464f8530 returned -22 22:45:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb757, &(0x7f000000cf3d)=""/195, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffea2}, 0x48) 22:45:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="cf2aecf58a04d89c06000000000000001907f8022c3128d6c3867209fca9a5d9929c35189bdd88b4836842663709b16e0200ebec8410931c10a59b91f860d8cf431c025fe40e5e7e81", @ANYBLOB="a7b7b525328e92fad8556bc8405672662be6236747a6cdb02d4d678ce828c53466ba9d95a678640848d2e5fa8b4739d9fb4ec579bc7a30ec20e05a0b5dcfe211d1755be72e1234bc1e0a0078f6bb14b485a0d6b3724374261746f10994fa01a66be0fc9fd9bdfce251f154d450b76dc3f22a40ead024cce8ffffffffffffff01cb156caaf2f5a8d666324c750d2a9236f921"], 0x0, 0xeb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:45:06 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, 0x0, 0xffffffffff600041, 0x0) 22:45:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:06 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, 0x0, 0xffffffffff600043, 0x0) 22:45:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) close(r0) [ 326.099473][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.118798][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.127894][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.136409][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.145083][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.153653][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.163657][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.172272][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.180785][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.188824][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.197852][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.206384][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.214916][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.222971][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.231284][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 22:45:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a0806", 0x89}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 326.258045][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.266589][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.280648][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.297768][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.307510][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.319893][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.329297][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.340524][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 [ 326.349776][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7510 returned -22 22:45:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1b406b0f278", 0xea}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 326.362915][T11054] binder: 11037:11054 ioctl 4020ae46 7f19464d7530 returned -22 [ 326.535753][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.554715][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.571216][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.580185][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.597722][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.609164][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.618274][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.626822][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.634804][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.642904][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.651630][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.659651][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.667584][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.676359][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.684330][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.692295][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.700242][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.708209][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.716799][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.724745][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 22:45:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 326.733456][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.741278][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.749070][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.757534][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.765346][T11068] binder: 11066:11068 ioctl 4020ae46 7f19464f8530 returned -22 22:45:07 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0x0, 0x0) [ 326.891647][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.910983][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.920927][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.941889][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.959971][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.972325][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.980666][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.989123][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 326.997174][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.006138][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.014189][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.022208][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.030229][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.038517][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.046890][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.055061][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.063053][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.070914][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.078983][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.086926][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.094952][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.102815][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.110826][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.118723][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8510 returned -22 [ 327.126604][T11079] binder: 11077:11079 ioctl 4020ae46 7f19464f8530 returned -22 22:45:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:09 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, 0x0, 0xffffffffff600041, 0x0) 22:45:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:09 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0x0, 0x0) 22:45:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}}, 0x34}}, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) [ 329.116293][T11096] tipc: Failed to obtain node identity [ 329.123383][T11096] tipc: Enabling of bearer rejected, failed to enable media 22:45:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}}, 0x34}}, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) 22:45:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 329.170616][T11102] tipc: Failed to obtain node identity [ 329.176441][T11102] tipc: Enabling of bearer rejected, failed to enable media 22:45:10 executing program 1: io_setup(0x8, &(0x7f0000000100)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[0x0]) [ 329.321633][T11113] tipc: Failed to obtain node identity [ 329.327411][T11113] tipc: Enabling of bearer rejected, failed to enable media 22:45:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7927, 0x4, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}}, 0x34}}, 0x0) 22:45:10 executing program 1: r0 = getpid() write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x9b0000, 0x0, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, [], @p_u32=&(0x7f0000000280)=0x6}}) socketpair(0x11, 0x800, 0x6, &(0x7f0000000340)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 329.660452][T11127] tipc: Failed to obtain node identity [ 329.682192][T11127] tipc: Enabling of bearer rejected, failed to enable media 22:45:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYBLOB="cf2aecf58a04d89c06000000000000001907f8022c3128d6c3867209fca9a5d9929c35189bdd88b4836842663709b16e0200ebec"], 0x0, 0x3c}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:45:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:13 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0x0, 0x0) 22:45:13 executing program 2: r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) 22:45:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 22:45:13 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/2) [ 332.271751][T11148] cgroup: fork rejected by pids controller in /syz5 22:45:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:13 executing program 5: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/207) 22:45:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000000080)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_PEERS={0xe78, 0x8, 0x0, 0x1, [{0x7f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x360, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="ded42fde215bdf7ff2f60df772b87809"}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="ae51562118ed6267fa44b909a885531a"}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_ALLOWEDIPS={0x414, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="c4d778daae5d764fef558f8a73735b86"}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dee0b15c7c6af5d2ca1526f08adcc88beceda00bb7b4823c1fcaaee745ef80ba"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x67c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x514, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="416655c8e742231b43dffd4b22225913"}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}]}]}]}]}, 0xec8}}, 0x0) 22:45:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="cf2aecf58a04d89c06000000000000001907f8022c3128d6c3867209fca9a5d9929c35189bdd88b4836842663709b16e0200ebec8410931c10a59b91f860d8cf431c025fe40e5e7e81", @ANYBLOB="a7b7b525328e92fad8556bc8405672662be6236747a6cdb02d4d678ce828c53466ba9d95a678640848d2e5fa8b4739d9fb4ec579bc7a30ec20e05a0b5dcfe211d1755be72e1234bc1e0a0078f6bb14b485a0d6b3724374261746f10994fa01a66be0fc9fd9bdfce251f154d450b76dc3f22a40ead024cce8"], 0x0, 0xd1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:45:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x8}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000a0467b0b56abba12dcabe358b44fa25608ccb28fd12acf157fa59f995d3773af85a43cd0e219aedc85a664c0fa4106106951dfceb1e97baffa22e70b1b20bc1c32148f3956ed972dc45c6cbf8e840cd5d4b35732777c72d716ffdadf60555d88a33a0400f663f60a286271c741d47d43baabfd4b62954cfaa8174fe830705b4d05e37ba17c627ad0b235277fc540f90f9adca254dd97e753feaa0dd38219"], 0x18}}], 0x1, 0x48010) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 22:45:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:16 executing program 2: r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:16 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x235) 22:45:16 executing program 5: getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000300)={0x9b0000, 0x9, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xfffffff8, [], @p_u32=&(0x7f0000000280)=0x6}}) socketpair(0x11, 0x800, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf25010000000c0003002000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x9}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:45:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) 22:45:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000040)="798ac693ce699bfbabab983f", 0xc}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r5, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 22:45:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:16 executing program 3: r0 = getpid() write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:16 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 22:45:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:19 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 22:45:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x0, 0x0, [0x0, 0xffffffff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:45:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x12d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:19 executing program 2: r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="cf2aecf58a04d89c06000000000000001907f8022c3128d6c3867209fca9a5d9929c35189bdd88b4836842663709b16e0200ebec8410931c10a59b91f860d8cf431c025fe40e5e7e81", @ANYBLOB="a7b7b525328e92fad8556bc8405672662be6236747a6cdb02d4d678ce828c53466ba9d95a678640848d2e5fa8b4739d9fb4ec579bc7a30ec20e05a0b5dcfe211d1755be72e1234bc1e0a0078f6bb14b485a0d6b3724374261746f10994fa01a66be0fc9fd9bdfce251f154d450b76dc3f22a40ead024cce8ffffffffffffff01"], 0x0, 0xd9}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:45:19 executing program 5: r0 = getpid() write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x9b0000, 0x9, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xfffffff8, [], @p_u32=&(0x7f0000000280)=0x6}}) socketpair(0x11, 0x800, 0x6, &(0x7f0000000340)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x0, 0xffffffff]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) r4 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r3, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:19 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r3, r4, 0x0, 0x1) 22:45:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r3, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:22 executing program 5: syz_mount_image$vfat(&(0x7f00000003c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x8, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="ffd9030000005b7213f6012e669070983f00d7529ce3a9eb0700930100006f93bc4c83045cd5c32cfd7a8ac75f8100a77b4db77b74412c"], 0x37) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_deladdr={0x80, 0x15, 0x800, 0x70bd25, 0x25dfdbfd, {0xa, 0x38, 0x1, 0xfd}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x310}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x1, 0xfffffffe, 0x7}}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x410}, @IFA_CACHEINFO={0x14, 0x6, {0x1000, 0x1, 0x1, 0xfff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x80}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 22:45:22 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="66b8ec000f00d0ea2c6e9574a800630fc744240000380000c74424026644c2c9c7442406000000000f011c24c0000fec22d0ccd0cc6cffb40849cd35ea3666640f2015b9bf0900007f000000ba000000000f35", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:45:22 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) timerfd_create(0x8, 0x0) r1 = open(0x0, 0x0, 0x0) fchown(r1, 0x0, 0x0) sendmsg$unix(r0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) openat$null(0xffffffffffffff9c, 0x0, 0x101202, 0x0) 22:45:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r3, r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TCFLSH(r0, 0x540b, 0x0) 22:45:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) 22:45:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 341.900556][T11926] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 22:45:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TCFLSH(r0, 0x540b, 0x0) 22:45:22 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 342.139453][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.168089][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.210455][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.256111][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.290269][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.311708][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.336475][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.377610][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.399817][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.416753][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.424955][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.433758][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.443004][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.450819][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.460176][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.468688][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.478902][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.486965][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.494970][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.503001][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.510913][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.519033][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.527052][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.534941][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7510 returned -22 [ 342.543242][T11943] binder: 11935:11943 ioctl 4020ae46 7f19464d7530 returned -22 22:45:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:25 executing program 3: 22:45:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:25 executing program 1: 22:45:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:25 executing program 5: 22:45:25 executing program 5: 22:45:25 executing program 3: 22:45:25 executing program 1: [ 344.678542][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 22:45:25 executing program 3: 22:45:25 executing program 1: [ 344.734141][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 22:45:25 executing program 5: [ 344.790500][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 344.815131][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 344.843223][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 344.900691][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 344.945614][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 344.989203][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.021140][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.048469][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.057293][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.070956][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.093572][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.105707][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.114652][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.127015][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.135212][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.147164][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.156268][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.169511][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.177310][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.185234][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.193115][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.200799][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8510 returned -22 [ 345.208573][T12062] binder: 12057:12062 ioctl 4020ae46 7f19464f8530 returned -22 22:45:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:28 executing program 3: 22:45:28 executing program 1: 22:45:28 executing program 5: 22:45:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:45:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:28 executing program 3: 22:45:28 executing program 5: 22:45:28 executing program 1: 22:45:28 executing program 3: [ 347.838056][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 347.849249][T12090] cgroup: fork rejected by pids controller in /syz2 22:45:28 executing program 5: [ 347.892941][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 347.926787][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 22:45:28 executing program 1: [ 347.936394][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 347.950866][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 347.974642][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 347.992216][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.092966][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.136670][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.164715][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.173229][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.183061][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.212953][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.227981][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.237793][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.246429][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.259098][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.267491][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.276192][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.284554][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.294420][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.302779][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.311263][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.319300][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8510 returned -22 [ 348.327386][T12092] binder: 12089:12092 ioctl 4020ae46 7f19464f8530 returned -22 22:45:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:31 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:31 executing program 5: 22:45:31 executing program 3: 22:45:31 executing program 1: 22:45:31 executing program 4: 22:45:31 executing program 5: 22:45:31 executing program 1: 22:45:31 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 22:45:31 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) 22:45:31 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@xdp, &(0x7f0000000000)=0x80) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 22:45:31 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:34 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="24000000220007031dfffd946f69050002000000054300000000391e421ba3a20400ff7e280000001100ffd613d3475bb65f64000000000020000000a47e23f7efbf5400000000000008e600", 0x4c}], 0x1}, 0x0) 22:45:34 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:34 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 22:45:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$gtp(0x0) 22:45:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/4\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000100)={0x9, 0x4, 0xc, 0x3, 0x7}) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8dad996a06b8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f0000"], 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') [ 353.854958][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:45:34 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 22:45:34 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 354.105541][T12557] bridge0: port 2(bridge_slave_1) entered disabled state 22:45:35 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 22:45:35 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x4206, 0x3, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/4\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x9, 0x4, 0xc, 0x3, 0x7}) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58ab16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8dad996a06b8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adffffff7f0000"], 0x10}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 22:45:35 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 355.036746][T12557] device bridge_slave_1 left promiscuous mode [ 355.043547][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.201989][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:45:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:45:37 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:37 executing program 3: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="120000001a002517fc85bc04fef6000d0a0d", 0x12) recvmmsg(r0, &(0x7f0000009180)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4086, 0xff6}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000002340)=""/194, 0xc2}, {&(0x7f00000045c0)=""/205, 0xcd}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 22:45:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) 22:45:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x8000, 0x0) sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200040, 0x0) 22:45:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') 22:45:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x61, 0x7f, 0x0, 0x1, 0x10183, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0xffffffffffffff85}, 0x8, 0x0, 0x55e, 0x5, 0x0, 0x9, 0x3ff}, r0, 0x406, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xfffffd2d) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x4, 0x3, 0x0, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x135) unlink(&(0x7f0000000040)='./file0\x00') 22:45:37 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:45:38 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:38 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@rand_addr="a22f97d344c8006a21986e000300", 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 22:45:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:40 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000000c06000000000000007d03ad8d0000000a0000080900020073797a321dc12787bd28a82584a4188a2150a74ff5b202fafc7ee97b0a5f5f669f129f480d2e12916b420061d6af6f605b1015607b59ac94968d4c3f650a470d287559"], 0x1}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x7ff) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x14) sendfile(r6, r6, &(0x7f00000001c0), 0x8080fffffffe) 22:45:40 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:40 executing program 1: openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000000e390000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 22:45:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:45:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1411c2, 0x0) setreuid(0x0, 0x0) setregid(0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="002fff63bdb97e8c39514a3bc257f0802bc8367eafe02459a92e601287c7eb3a5e300401952acb2185b277cde8fee496350374fa3f6404784d07f7b854d111aa86bf0bfa23eb08b72f51f88cd545901fba56930147435cae6ab24e6874c032ae361cd9b645161eea5883f7a3ab5fcd455e011f35d4d510005bc8ee99730dd3ceed093a93cf2ad8b887463ba724f40e71e1052d64255da0db4b33da3235a1de8f24e03fa3f8"], 0xa5) sendfile(r2, r1, 0x0, 0xa198) 22:45:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xff, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x20}]}, 0x8) openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x80, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="000700009e05236afadc95040000000000e2708caf6600", @ANYRES32, @ANYBLOB="140009000002000000000000000000000000000106000a004e22000008000800ac1414bb05000200020000000800080000000000060001004e210000"], 0x5}, 0x1, 0x0, 0x0, 0x80}, 0x8045) dup(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 22:45:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 360.219761][T14063] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 22:45:41 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:41 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) socket(0x0, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0xe, 0x0, &(0x7f0000001140)="09000000081d1dc7610da2290f9e", 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 360.322063][ T27] audit: type=1804 audit(1585867541.217:42): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir684161860/syzkaller.fUb3Gp/98/file0/file0" dev="sda1" ino=16993 res=1 [ 360.322309][ T27] audit: type=1804 audit(1585867541.217:43): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir684161860/syzkaller.fUb3Gp/98/file0/file0" dev="sda1" ino=16993 res=1 22:45:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df00000000e9000500010007"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r2, r1, 0x0, 0x100000001) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 360.326073][ T27] audit: type=1800 audit(1585867541.217:44): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16993 res=0 [ 360.337302][ T27] audit: type=1800 audit(1585867541.227:45): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16993 res=0 22:45:41 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 360.419878][T14063] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready 22:45:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 360.463789][T14063] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 360.519142][T14063] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 360.608412][T14063] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 360.657981][T14063] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 360.705334][T14063] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 360.718305][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 360.740254][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready 22:45:42 executing program 3: [ 360.746101][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 360.746409][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 360.750726][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 360.750921][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 360.751091][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 361.090563][ T27] audit: type=1804 audit(1585867541.977:46): pid=14508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir055917998/syzkaller.3OhRgE/106/cgroup.controllers" dev="sda1" ino=16979 res=1 22:45:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:45:42 executing program 5: 22:45:42 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:42 executing program 3: 22:45:42 executing program 5: 22:45:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:44 executing program 1: 22:45:44 executing program 3: 22:45:44 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:44 executing program 5: 22:45:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) 22:45:44 executing program 3: 22:45:44 executing program 1: 22:45:44 executing program 5: 22:45:44 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:44 executing program 3: 22:45:44 executing program 1: 22:45:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 22:45:47 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r5, r4, &(0x7f0000000240)=0x6, 0x4000000000dc) 22:45:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) 22:45:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d40000001d001905000000000000000002200000ff02ff0000000000080001"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 22:45:47 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:47 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 22:45:47 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) 22:45:47 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:47 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400210100000000000000000a004000", @ANYRES32=r4, @ANYBLOB="14000200000000000000000000000000000000011400060007000000010000800000000000000000"], 0x40}}, 0x0) 22:45:50 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x40}}, 0x0) 22:45:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:45:50 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x11, 0x1a001000000}, [@ldst]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 22:45:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:50 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, &(0x7f00000002c0)="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"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:45:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x45, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) 22:45:50 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x4000000000dc) 22:45:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 22:45:50 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:45:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:45:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 22:45:51 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_ifreq(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x4e, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) 22:45:51 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, 0x0, 0xffffffffff600041, 0x0) 22:45:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) 22:45:51 executing program 5: sync() mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x7) 22:45:51 executing program 3: sync() mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') removexattr(&(0x7f0000000180)='./file1/file1\x00', 0x0) 22:45:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:51 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_ifreq(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:51 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, 0x0, 0xffffffffff600041, 0x0) 22:45:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:45:51 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000200)=""/255, 0xff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:45:51 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_ifreq(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0xc00000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0) 22:45:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:51 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, 0x0, 0xffffffffff600041, 0x0) 22:45:51 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 370.920491][T16373] fuse: Bad value for 'source' 22:45:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:52 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 22:45:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:52 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 371.136045][T16606] ptrace attach of "/root/syz-executor.0"[16605] was attempted by "/root/syz-executor.0"[16606] 22:45:52 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0x0, 0x0) [ 371.236500][T16629] ptrace attach of "/root/syz-executor.0"[16628] was attempted by "/root/syz-executor.0"[16629] 22:45:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:52 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000000000000900010073797a3000000000f0010000020a01000000000000000000000000000900020073797a30000000000900010073797a30000000001401038008000240000000001800038014000100766574683100000000000000000000000000010074756e6c3000000000000000000000000000010065727370616e3000000000000000000008000140000000007c0003801400010073797a6b616c6c657231000000000000140001000000000000000000000000000000000014000100626f6e643000000000000000000000001400010069703667726530000000000000000000140001007465616d300000000000000000000000140001006e657464657673696d30000000000000daff03801400010076657468315f766972745f77696669001400010074756e6c3000000000000000000000001400010076657468305f746f5f7465616d0000002c00038014000100766574683000000000000000000000001400010065727370616e30000000000000000000b000038008000140000000002c0003801400010076657468305f766972745f77696669001400010065727370616e3000800000000000000008000240000000007502038014000100636169663000000000000000000000001400010076657468315f746f5f627269646765001400010076657468315f746f5f7465616d0000001400010062726964676530000000000000000000140001006970365f76746930000000000000000008000240000000001c00e8231c3501a742580000160a00000000000000000000000000000800074000000000140000001100010000000000000000000000000a"], 0x254}}, 0x0) 22:45:52 executing program 5: 22:45:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 371.491020][T16792] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 371.507842][T16799] ptrace attach of "/root/syz-executor.0"[16796] was attempted by "/root/syz-executor.0"[16799] 22:45:52 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:52 executing program 5: [ 371.532738][T16792] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.3'. 22:45:52 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0x0, 0x0) 22:45:52 executing program 3: 22:45:52 executing program 5: 22:45:52 executing program 3: 22:45:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:52 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:52 executing program 5: 22:45:52 executing program 2: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0x0, 0x0) 22:45:52 executing program 3: 22:45:53 executing program 3: 22:45:53 executing program 5: 22:45:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:53 executing program 2: 22:45:53 executing program 3: 22:45:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:53 executing program 5: 22:45:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:53 executing program 2: 22:45:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:53 executing program 3: 22:45:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:53 executing program 5: 22:45:53 executing program 2: 22:45:53 executing program 3: 22:45:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:53 executing program 4: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:53 executing program 5: 22:45:53 executing program 2: 22:45:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:53 executing program 3: 22:45:54 executing program 2: 22:45:54 executing program 5: 22:45:54 executing program 4: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:54 executing program 3: 22:45:54 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:54 executing program 2: 22:45:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip_vs\x00') ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="539b9105ab1072c24ec7eb10c788f1adc93f003c758fac77455f066166a5883f324369d4a8c12b877ed1c127a9a8bcadac1c448797f0e1dc2bc979e7eb047e364a459b0c22c086d3938f63a4cda4188d06b30612e327b473e645f9215af2"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) close(r0) 22:45:54 executing program 4: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:54 executing program 2: 22:45:54 executing program 3: 22:45:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:45:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:45:57 executing program 2: 22:45:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:57 executing program 5: 22:45:57 executing program 3: 22:45:57 executing program 3: 22:45:57 executing program 5: 22:45:57 executing program 2: 22:45:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:45:57 executing program 5: 22:45:57 executing program 2: 22:46:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:00 executing program 3: 22:46:00 executing program 5: r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {r0}, {}, {r0, 0x4}], 0x6, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10101, 0x0, 0x0, 0x800e00707) r2 = socket(0x1c, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r2}, {}], 0x2, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 22:46:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/174, 0xae}, {0x0}, {0x0}, {&(0x7f0000000200)=""/237, 0xed}], 0x17) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r1, 0x0) 22:46:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:46:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:46:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/111, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x27c7, 0x0, 0x0, 0x800e00560) shutdown(r1, 0x0) r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) shutdown(r2, 0x0) 22:46:00 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x19dd) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/111, 0x6f}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x27c7, 0x0, 0x0, 0x800e00560) shutdown(r1, 0x0) r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) shutdown(r2, 0x0) 22:46:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:46:00 executing program 2: r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {r0}, {r1, 0x40}], 0x3, 0x4e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x10101, 0x0, 0x0, 0x800e00707) r3 = socket(0x1c, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3}, {}, {}], 0x3, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 22:46:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:03 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x19dd) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:03 executing program 5: r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffff9c}, {}, {}, {r0}, {}], 0x5, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10101, 0x0, 0x0, 0x800e00707) r2 = socket(0x1c, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r2}, {}], 0x2, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 22:46:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr="00ece300", 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socket$key(0xf, 0x3, 0x2) 22:46:03 executing program 3: r0 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="8d", 0x1, 0xfffffffffffffffe) keyctl$describe(0x6, r0, &(0x7f0000000180)=""/10, 0xa) 22:46:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1c5, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) 22:46:03 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x19dd) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:03 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/mice\x00', 0x0) r0 = gettid() tkill(r0, 0x3c) process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/226, 0xe2}, {0x0}, {&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000580)=""/196, 0xc4}], 0x4, &(0x7f0000000500)=[{&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/171, 0xab}], 0x2, 0x0) 22:46:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:03 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000040), 0x0, 0x0, 0x8, 0x0, 0x0, 0x20}}], 0x58}, 0x0) [ 382.756429][T17980] atomic_op 000000007b32cf95 conn xmit_atomic 00000000e30f9b0c 22:46:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:06 executing program 3: r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{r1}, {r0}], 0x2, 0x4e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x10101, 0x0, 0x0, 0x800e00707) ppoll(&(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 22:46:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:06 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7, 0x40000) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 22:46:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 22:46:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{0x0}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:06 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x7, 0x40000) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 22:46:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{0x0}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0xaee8}], 0x0, &(0x7f0000001580)={[{@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask'}}, {@dmask={'dmask', 0x3d, 0x1ff}}]}) 22:46:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x0) 22:46:09 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none='cache=none'}]}}) 22:46:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{0x0}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 388.434573][T18435] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 22:46:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 388.514119][T18440] ntfs: (device loop3): parse_options(): Unrecognized mount option . 22:46:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x224482, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x800) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000280)) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x401, 0x10001, 0x400}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) listen(0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a394, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="2495e04604bc48bbadf0059cfbc6bd1a5cdb6cb746db1802296feb35b0ff5dd97db4c6ffa1fab41a1e13beacf3a6683b6da96071ab5315a4656a4291de2ed90492ebda28f7b01408bf582f0fabb973f27e517ec456b98e4d103001da8a730100d178b1a7a8e07bf8b99da303c5b3ef43a8308e131d2260ccc4400b4dedacef2e41a71d5b44ee7a91b768760471a10be89d6a396ff272ffc4f45e1f8cb2af0474992b6f281d72f84cc9b5682564275363701c46fc83cd528db72f3a55ba9f0bea88ecd1e7f26267600b18ba5f6a594c2bd32f7c"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 22:46:09 executing program 2: 22:46:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 389.089402][T18624] IPVS: ftp: loaded support on port[0] = 21 [ 389.183029][T18662] IPVS: ftp: loaded support on port[0] = 21 [ 389.422504][T13267] tipc: TX() has been purged, node left! 22:46:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:12 executing program 2: 22:46:12 executing program 5: 22:46:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:12 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:12 executing program 3: 22:46:12 executing program 3: 22:46:12 executing program 5: 22:46:12 executing program 2: 22:46:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:12 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:12 executing program 5: [ 393.171486][T13267] tipc: TX() has been purged, node left! 22:46:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:15 executing program 2: 22:46:15 executing program 3: 22:46:15 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x19dd) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4", 0x29}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:15 executing program 5: 22:46:15 executing program 5: 22:46:15 executing program 2: 22:46:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4", 0x29}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:15 executing program 3: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x2000000000000107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) 22:46:15 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:15 executing program 5: pipe(&(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x10000}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x40000000000000b, r0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) epoll_create1(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000280)) syncfs(r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002080)={{{@in6=@mcast1, @in6=@rand_addr="9de6deec82f26b2855dec7f58fc2c4c7", 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x1d}, {0x8, 0x5, 0x9, 0xfb6b, 0x1ff, 0x8, 0x3, 0x2}, {0x0, 0x3, 0x4, 0x6}, 0x7, 0x0, 0x0, 0x0, 0x7, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x2b}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x5, 0x31ba, 0x7fff, 0x3}}, 0xe8) 22:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x15, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0xfffffffd}]}) pipe(&(0x7f0000000040)) 22:46:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4", 0x29}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:15 executing program 3: pipe(0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x40000000000000b, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) epoll_create1(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000280)) syncfs(r1) pipe(0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002080)={{{@in6=@mcast1, @in6=@rand_addr="9de6deec82f26b2855dec7f58fc2c4c7", 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x1d}, {0x8, 0x5, 0x9, 0xfb6b, 0x1ff, 0x8, 0x3, 0x2}, {0x0, 0x3, 0x4, 0x6}, 0x7, 0x0, 0x0, 0x0, 0x7, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x2b}, 0x2, @in=@multicast1, 0x0, 0x4, 0x3, 0x5, 0x31ba, 0x0, 0x3}}, 0xe8) 22:46:16 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6a", 0x3e}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6a", 0x3e}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:18 executing program 3 (fault-call:7 fault-nth:0): clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:46:18 executing program 2 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6a", 0x3e}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a26", 0x48}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:18 executing program 5 (fault-call:4 fault-nth:0): clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a26", 0x48}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a26", 0x48}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:21 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:21 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:21 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:46:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0", 0x4d}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 400.916177][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 400.937534][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0", 0x4d}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:21 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:21 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace$peekuser(0x3, r1, 0xffffffff) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 400.979941][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.030308][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.052001][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.073639][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.097389][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0", 0x4d}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 401.156573][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.194608][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 401.217553][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.235722][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.273070][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.290369][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.317818][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.339335][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.339727][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.384685][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.424683][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.442028][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.458365][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.468137][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.477196][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.490883][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.499545][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b510 returned -22 [ 401.507935][T19314] binder: 19306:19314 ioctl 4020ae46 7fd3c032b530 returned -22 22:46:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x5) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000080)=0x5) r4 = getpid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) pause() ptrace(0x10, r4) ptrace$getsig(0x420d, r4, 0xffffffffff600043, 0x0) 22:46:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b", 0x50}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x6, 0x3f, 0x6, 0x5}, {0xfff, 0x40, 0x0, 0x6}, {0x101, 0x7f, 0x7, 0x3}, {0x90, 0x7, 0x2, 0x9}, {0x5, 0x8, 0x52, 0x6}, {0xe4, 0x0, 0xe, 0xffff7fff}]}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:24 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x2, r0, 0xffffffffff600041, 0x0) 22:46:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b", 0x50}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:24 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:25 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b", 0x50}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:25 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b31", 0x51}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:27 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept(r3, 0x0, &(0x7f0000000180)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[0x800]}) r5 = getpid() pause() ptrace(0x10, r5) ptrace$getsig(0x420d, r5, 0x3, 0x0) 22:46:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b31", 0x51}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:27 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4, r0, 0xffffffffff600041, 0x0) 22:46:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv4_newaddr={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_ADDRESS={0x4, 0x3, @empty}]}, 0x28}, 0x1, 0xf0ffffff}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14010894}, 0x800) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="803894341ecfec0bad6a127340661dd2"}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xb6e2892eefa62387}, 0x48000) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = dup2(r8, r9) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b31", 0x51}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:28 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000000c0)={0xfffffffc, {{0x2, 0x4e21, @multicast1}}}, 0x88) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:28 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7ff, 0x400}, 0xc) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = msgget(0x1, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/182) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:28 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:30 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8001) read$usbmon(r4, &(0x7f0000000040)=""/25, 0x19) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000000)) 22:46:30 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80000000, 0xc8300) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0xff7fffffffffffa6) setsockopt$inet_buf(r4, 0x0, 0x28, &(0x7f00000000c0)="6e9b0ad9217547c016d53568b4933c3fe3ac6aae269abd829d1fe60e689d95dc2849a9705c1f44ecd054cf009b013449ff9375946f03386d30705b1edc88e5ae6c0e7d25d93c0454847d2f2d32a9d4585c81f3d9f8381e4ad217fe01780269cde442fd752c80315c69969fe523a8db261dfb2804ea4b0f865746336ca9b6cb2db1e6ebe6bf0da71881dbd8200fb03c39bb10e161502af6eac93dacd3de8a12994732d69b6b68c0057138b35d5abc4f83df6b6d5b2387e0eda707b0159af2f8dbec832e86b85d98438b8f2d2e1e17d48a5958c2bb8154b593c293b0bcf1e499592d6e84986aa7f7bb4744", 0xea) r8 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r10 = dup2(r8, r9) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:30 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x5, r0, 0xffffffffff600041, 0x0) 22:46:31 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:31 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0xcb52) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000001040)="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", 0x100c}) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x4, 0x4, 0x4, 0x1, 0x403, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r5, 0x1, 0x1, 0x4}, 0x40) lseek(r5, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000080)={0x5, 0x7ff, 0x0, 0xee1, 0x2f59}) 22:46:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:46:31 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:31 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000200)=0x4) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000000)={0x2, 0x3, 0x4, 0x20000000, 0x800, {0x77359400}, {0x1, 0x0, 0x20, 0x3, 0x9, 0x29, "b931adcf"}, 0x8001, 0x4, @offset=0x5, 0x101, 0x0, r3}) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000080)=""/26) r5 = getpid() pause() ptrace(0x10, r5) ptrace$getsig(0x420d, r5, 0xffffffffff600043, 0x0) [ 410.538161][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.559224][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.571080][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.592446][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.634070][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.634540][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.645260][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:31 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 410.645750][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.646184][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.647641][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.648618][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.649065][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.649528][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.650076][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.650474][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.651239][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.655765][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.667827][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:31 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x7, r0, 0xffffffffff600041, 0x0) [ 410.668336][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.683718][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.685361][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:31 executing program 5: clone(0x804000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 410.685796][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fd) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) sendmsg$inet(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)="67f4ab33ed683269053a6181bb49f91d86c38bde7779e758ca839e2555fd3c827470e1cbb5fe4373492f4c08ffa37ad06a8e9b71373500bddf0401914bdb9d0909e8ee76c5706917231ac5eab76da0bd15b2bed64843b27342137c7491", 0x5d}, {&(0x7f0000000140)="fd59cc0d4cf769af3e9952e8f41ced8a0f2794d69ce7aa84b884a2b77810d6f009a1b3eacab39a1ef1f4e06924eeee463c27980652248d2de395664a742378f378d4ae30621afdc8251ced17bb82b80b6a893ec1b37c771d67966d44b918778f817a4210a9424dfa38416e6b6c4a8d5a925ea1abc6", 0x75}, {&(0x7f0000000000)="5449c3aa3da8019916d15356daee588d442bdda2a3ac3e44f2b4e8a0849967de8500acf589dd9fde0aac0beb36a874e325bda63107", 0x35}, {&(0x7f0000000200)="c354c06dad2b24d9c391d76c21be3c03f8aa78e97175085dfd3493340cce6f71e54b01bc39658911b33dfab7fef44de89a8a2d2114ef39c4e6fe5e603cf714884ff619317fdb3b017afbaf36869e1aae2db0a9075d81aad5bb06ba8d551ee8f407447b4e756dfe43d2cbf578a4033cdefdba724e0f4d35e32036f52f1edb16f691b9a11bd8fd64a2f6a1291d21c120fa9a38fed194729fcdcf89b11ec8de1f9a0eed26e49b51010a357a6514faa72b283386be58e67c38e701cf6d", 0xbb}, {&(0x7f00000002c0)="7bdfc0f70248b1e50d0ca8d341b32a0201d0365bca9b9b4c566b64a1447821b7c7134514401e79a2a948b1c3ba89522f01535896bb0f27fb5be09727603d714658fb9a2e7c200a2c83d32e4e2189db37c88dd88272f93648bd06f35e95220cb98a09455c96736dcd964163c9365d07efa53e18dd8bd3e44baf4f52f5905fa19393a95d2a7a29d5846fea99375cc3037d557c7cfb29079ab244413cdc7c6b807fbca172b88e208145da7558592c0f8b91a15d64e810304db9e047721ed4f41b1ed4a76d982caa84100a15e722c7400abbe520df8030668b411487bdbc8be18bc27e35ac580e461546e6e2e14cfd42335f531cf3dbfb72db05003fa387635a31e7323a50c85d5b409101f06ba386e50248c3848173e1cdfc4c03ff00883c66a219483ef8ce611dbf287a3901cbecb89b9aab3fe8f344a239766bce649fda760c0a3a6cdc97576f8c9f18c276046c1956e8d5da76dd3e25635826bc159dba8ed369915beb792e393baa7d1150b608d3ca0e53a1da99b37062c55bdb6d406bda09453398f3007d0f6d4c2a3550feea1a3d40719d556915b1d24a6895a840696351a23819d03d68d633bf8c07d313489e29bd82b44beaa2009589a2d8aaec8e38ddfa0286a865a44996d6ca94856dd6d3e969076e329bba4099bdd5f013468304381f433516f9b2af42c7438f826cf31280a671ace6555f6cc8c01ba1e89bd953611c545b616f2a71e0da48d20b9800075e6ec52ff4c3176da87574222761d3a5c1183f553e238eb9ca60eff9a12aa65e27c213e277f7a0f58f5ef64ac2b2e9b496ba35ba2d0fd8e0f33a80a149cab3d41e37326ef29bef3eebc4861a91e4f6deedd2c895d17926f00a7164ce8f5650e490d53ac8b6b614c9859215e2b3942f2a8b922299b51bb72c130b0e0d9e27cabd090b998c2eaf10a50ac82cc25cb03c5c60953c0bccd28a20de551d96e3cac9459b192f109c43379f1ff0c67f6668355557b3c6c711e25e0fce2ccb06a2e049952882391b633339899545261d8916cc78667d126598acc490c509a86e28700a86818e9bc03040014d6286087f6bffd773913c47e3657476e0b2a33573fb14ab65e40279b84472a0772ac122bbf1df8d1c25321533c8216d9b7db28b5c44efa1dd61a7391fd56e891afbdfe7acb62d0c3120a6f7c03a863db53b7641d896c0f51d14ead729952981b4e5f4792429ac24e5bc507282364ff630cfedb5f2bd18caf927b0564909b346223c0e716557ccbcf2fdd813329717d3d4f1ffcb17ad9f4ccac436d10a8cfabdf0a37fda73ac789dd6c843777523851e9c44238aa3c6c9ca9344356fb2e90bf7ed78041233349d589cae2c751b8aca7c72499c0216366f3c0063aa55a161c453c0d42a0738470ebb53db5c1b2d1be143a6d6c07a761c743009b8d71a68ceae5e97da2d9e51af91d35b29baa76cfe9917340cee8edb92b49d013013f092ce07750c6a557bdf5f894c885fe789221ee9bb364ef555a729c8b276862da047ce8361065952a39fa3c8f3dafda5dc4f18881ecbe23e6e6a19a93f8cd79252dd169af30676571729747013563968453898c09a628e2ec785bc29b38254818067454ebc9fa5430fdd5390be8b116606946c986c11822c08128ffd2ae3b411bb8b29380d6333e84a8ec99654e384f9f1ff1965dbb12b2320233d604dbb0efbb16a1113c30a61ca3d1b87bda7b7650ccb412b10fb025fdcd3a1898482e971e9f52bd29f9402045f7fb5aa6599c79286430abd18f166cce338a66011ccc45e74e849dc2c864d6e0382d72758d0919ff4e3e73a58ce3cecf8c4821b78d76f7558cb44af35383625d26df444c80af5b5f7db02752c164338355b1dc0a91f750b9902ec565772517c7412dfbef64018f3989239f49213261001c1cb0fad4e756899660d901ad58052ebbdda6af11cd0c81e76b7528c7ba5a9abca123d1fd5f858b3218aaa3837c523b0eab8654a45d9b469b54888b3ea3a5231a054ccf56e1f334a86dc02f6b268f16ad8be3f9b2e4b8aacd1f61167ee49d974c0e04fbeb368cd5b2286289b19c0a5a54749cf6146090b807ee8ba084393f716bdfb3452b6ce68bc56d4f472323811d0412a6e457780c2851b8c43a6738502d0762c55f72f5efe6491d0057a0994e6a656e41ffde89408d6ea0bcffbc8cb71f8a649a0f1ec15c70fa7cdf232464641ff2bf8207415869cea74560f2ba781d327e9a46381c86ea00a993cc7c8edeb6e406ea22b7cfcfbd126c61ece99fe4911f7ea2e53eefff9f00e0161e7522aee54af52705de3097730100564a6a74ee26ee0c7508f07f24de4b9b144bfc798e5fa258b2a9c8aa835e0e1d53f73666f85ba7958138117c0cc0655b183cce9b9438cf5d0431cc0cf6cc5109a9f6421c294a660d4f2677f2806dddc89e790046d64a0f19d34506315edd11394bb47c2fea7ef6c2a047383e39a8b8be7c43776a7e9d707f3108bf2ddc8356e50c36c6184b56419e2d12798292b917d1045c45109a66e4c5f40c2a9dab458ef63ab36e02b34b806ca93446db9f78fba41fb1e93052995ae142e0748a852229250d2dded34a52314a1b47ca25d876f911646f5a32eace152dd9409fd485bf4e4155655b82ebacea6e6ceb4f7405b70ba70a34b55e76c4c94ce118724809fedd3f63bb9b58e17e618316ee934527ed0fb54b499dedd74b5dcd50b1899fda745bfbb2671d50bd11b56424cd3bbffb3cee3ce2b97e6b8ebfacd58160ac130b464998ea516e010ca454ec1e0f06b3537052b1d2ab93aa11480643a3ee3844ff0255394dc730caa17106b03db53255c6da0f29d3ff47f882158da258f4eb95c980340d46f7721b1fa1a775cc006fa121113bb4b53b91fc9751f3dd7226d56e3b3d8627422acb39ae31b2e2caefe7611a8107b768b474fa1d1da00509af48b76c5770da3fb036126fd4053aa4980be17100e786644450f254676653e0ffaf322200c8a1e59ec6828307c587e328b395b46bf85b41ad15e4d1560258b06cc9d8c49315ac53f9e13205865f2dd6f02743947ae95a0e86d00fccf16111051e2febbee69455163e04160b09c9e80398de1079db1defc82ef5fc07a1289f96ec8d0b6d1da95029dc5962fcae2e4fcab0509ba21c366fb75f740ce657998bf1ec3f9e366480a8fc4d2081c0ff547b4c946d5d234a9d69853a30cf1a53c9c95a066fb5b3c4f763210a56305439ab1eea6a70f8563edb4c4a15931653ef0ebbb7980d566d721ae5baf747bb470d5f42f3fa1955cc190624904271a173bd4b8627d121364e3bca536bd4e45f7903d0404c31dd82502515fd2da72ab4bfd043463363b5e864d7f5f3bd3a6c9c58a5f583766a7231fb49e1dd0e3aaf60f977cdb9841db66eeb4352330eafbfd93051c2bb8d07386941c047356e4d2a33db6077a21e4b8abc65bd9fe687ed6a2a61fe4b7c68df440852a7f7f8b47060eed420379328a36d53dfb81c735513b1e198f20f858ae66092b268b4b384df2ac027b5eb1f684cf85a8a8f5b9a1b52b8657b47dab06a8531578b4619cbf28a3af7cd1ecca52cd62437d17f365fd0929afdd0dfb7fe8695b65af29201ea2caf75d4fff10f3c7f867d8c4eafd7b5ada816afbaa8cb1cbace4b60d6c023fd914e9159034d4103212c4f1858115253ebd10d13127a6d894b6a36e8105d65ae42a3cd6664f6b6294537c7971294325ce49fc23a5657561f469304d6f9a09cab3f5f2703ee4c7377ba4bc8bd7f81612407c9645d92bc5a98a97b8ed0fff2fabaf773a9cce6d066cc5ad5bea4b0c2aa76e5a46f9a07e09b1c3a1a2cfbcd5d44043ad8dfbe81c8522c6c081176192b59ed878b02f3f6a9a81abbec4921cfc8136e106af89337ab4abfe254bf3525d81518bd6611205686e3b21f9f809cd563d95a20fb527566dc68efce9a70e04e1f9b300a06a046018706c03e0af6ae12ff5efe8ec69e929ef97f4eeb13912378abe22bb6760262732e30c9ecd0122f98850f8f1521a4fcf75424bd08ea6c71d55769204ab1c0625867b89da79e796252f58ad78e2c902766dc33c78fab2feaad17b086b8a8e411a010059093c6201dd5ede08c7287a6161965031da753f97259149647a2771a7e014d8f6771d3a194d675a60166796ad80aee428269cab1cd0cca46569fdbd312d0c720a2fe28680ec9c6bfc82e00691f7a5b36de8ff00291c3b341014e97653864875bc896ee4a1cbffb08581836fc0c7bb4632c38724b2465120b121dc03438f4fa56d7c72abe00f57d0d8355d7a9fc80ce28f20d9a4bf64a755a61378b25b473a258c1bf02a2c39846185fa07af57466391a3f73ab5ec6562f62b40230a82794ae8efa254bb6539c3d6f66fae1363a286e3da916e52aacaee41f2ad1cd872044d2049f424a41e7c7ef236bba75b99d81151ce573dbd65ae199456b7a192a70f72ecaca6d4606227caf01dd362e8dd402af4c851701527ebdada38e24893760bee471cddbe2c4c0328d12378643d02dbb5240b093b0fbf9a628c981e2738c8d5278678dfc90a2c21a6268990a5d42380986e075eac5cf7aa30c23a457e04acf66d06a7d6184d70c42506e705075ab5374d7ff06045fabb99e211f00217c849eb8c64d0c97b7434b275fdcf295b79d2b195bb6a1bd75cf7ec39fe3f337c571b1dd1bea631c2a8609439e79953a1749b78cc5dec4d9c078bbfee223afeaa37eec1e1e53d61bbccd1e9e698d831f0ad3efc2ef6e715ee480ec2bb1461cdd1c018cb10c104d3897720010884e40262432fe0cbdb1c339b33a8007532f3d725acbcb2487e55ae06a79e94a3097c42208bbb97a667da5ddfe697ede6edac8534880f0f2437939553930faf3cd2cb8afd9863eb4e3a18aa838649a27abad5ce956a6388563ffe85f1d235eff30f057ae82aaf359863fe7391c8b5fe9daf91131ee7ee2581f17843c1ae395688388963bfe06642479ee01d16b072020d8a800f77ae3aca1044f60e9a5e4722f343285799c448f7cfb58a6d7497450056db67cce68ca6de249feb4ca15849935835811f390d4ec0d03ea7a631ebc59cc949fc83caf4fae3ed88e65a313ed38a7073a3bd6d6afea90713a8c4866e12230998b9b535343c8da29c7259c1ce576593934abf47708925ae9fe1de7749dcc757ae985cb4be8a6a0558f60d5dc86c2d62fa2dfb867df21f43eb768f63f20c008acf4aa04da2050680960a2f1845205bc3dc5c5a98972a95f3fec801e8fe5dfef12e80e7636f9db00b982e3c4fa202c894b0767d2a2e4275d925963b4256804e8449c6a70c903a22224509d2d3f4f080eebb83f4fbfc2819194a42e959e89a1430c11bd2f636eb5489637b9f4a63b39bd33002e54d7989f0ee1b4d321d5af9a9af8b61509061996f7d48945478a1b9ec26df6b0ca10a0d3e4d2bfe98a999027956927b0024e504bbc77815bff3a1b0eba3b14f03dd802c4863dee92c55edd7b59b6076ba85b7568b0ed8dd2338ba208720d8c2152e08e6d1480cb74ab6b8bb9063d2c6c616628e5be455d1a486d8dd15aff0023ad0503757c7f1a59315e8875a4f9cf8d832753ed305814d325b35dcf39962003b4e8b9f34fd68abf8772607db7024aa2d1bb1633b57f8d1527908ff6683d530e32b924f688b28cbc96ff8a377fb87889b29e6e08bf42ed39ce3e0ea2458018ce633c827e089fca3e9b96be1d66d9a40b77d0b0b4c51ade0967c6897d6e7fc4b186b59213a8ea20eff2594052d55a9ff984fb002e02feda03e04534aecb8b506497a409732d37cbb261d2da0569cb8f3", 0x1000}, {&(0x7f00000012c0)="2f8f30c56fbf46e2ef8ab2dff63be08a284c59a8962c6f66a3bd7524c0c7b1174a3c8c5aed848b9c10caf8c3b80f7fceae2540994552bb7ebb776387a5a9a1d4e60a71345959a2ff4c14c6e5f200d465235f9a8bfb02904c75a75fab73cd2fcb3424e0ae4cd7d1e872f7cef25a6643311f46e7ad45d3a06d58e58b5317366f8a1942d070c26dc7ce8c9b6ebae4f19ea4", 0x90}], 0x6, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0xb0}, 0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r6, r7) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 410.689791][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:32 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 410.690215][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b510 returned -22 [ 410.695725][T20672] binder: 20669:20672 ioctl 4020ae46 7fd3c032b530 returned -22 22:46:32 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000140)=0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4001fc) write$vhost_msg(r6, &(0x7f00000000c0)={0x1, {&(0x7f0000000040)=""/40, 0x28, &(0x7f0000000080)=""/2, 0x2, 0x1}}, 0x48) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) sendmsg$nl_generic(r2, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="1220f3971819a7d552c88ee55ade30bfe3ff10dcbfc08fc17cae64e7f1cd84711c36"], 0x1300}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000800) [ 411.280463][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.280947][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.283205][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.354539][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.357879][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.361506][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.362399][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.363359][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.364592][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.365373][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.366506][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.368037][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.368566][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.369066][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.378135][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.379043][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.379507][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.380651][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.384546][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.385002][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.385788][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.387274][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.387994][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.388525][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b510 returned -22 [ 411.389552][T21048] binder: 21005:21048 ioctl 4020ae46 7fd3c032b530 returned -22 22:46:34 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) ptrace$getsig(0x420d, r3, 0x0, 0x0) 22:46:34 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f086", 0xac}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x50000, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000000c0)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c653022202f6465762f73657175656e6365720020202f6465762f62696e6465722300206b657972696e670aedf0ec02a104e0606a0e33aaa4a609c97b77daad81c7ab03125b1b15c76d9cd3b815ac81e443c3ed747225b3ac590bcf37168c75cdc5ea8207afedb25bd8066f8acd6f9b13d30591cafc359c"], 0x7f) r10 = ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000180)={0xf000000, 0xb3, 0x2, r10, 0x0, &(0x7f0000000140)={0x990a72, 0x5}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r11, 0x1, 0x1}, 0x40) fchdir(r11) 22:46:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:46:34 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x8, r0, 0xffffffffff600041, 0x0) 22:46:34 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x9, r0, 0xffffffffff600041, 0x0) 22:46:34 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:34 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={r8, 0x40000000}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r5, 0x2}, &(0x7f0000000040)=0x8) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x20000) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:46:34 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000002c0)={0x9, 0x1, 0x0, 0x0, &(0x7f00000000c0)=[{}]}) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:34 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f0000000000)={0x3ff, "a84972f13eb268b6fed845c45e9612c79c86cd02818523c4277c5eae4d372758", 0x1}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r9 = dup2(r5, r8) syz_kvm_setup_cpu$x86(r9, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:35 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f086", 0xac}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:37 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'macvlan1\x00', 0x40, 0x4d20}) pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) socket$inet6(0xa, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:46:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r6, &(0x7f0000000900)={0x2c, 0x0, r8}, 0x10) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @mcast2, 0xfffffffd, 0x101, 0x20, 0x400, 0x8000, 0x0, r8}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r10 = dup2(r3, r9) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:37 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:37 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x10, r0, 0xffffffffff600041, 0x0) 22:46:37 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:37 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000640)="230c00000029a761cda2f6fe2f9ba3cf877e499d267b3435b1a3fd4633b4fc4d5c5a739fa7fecd4bf9040305c0af2ee88421aa40e9664e5245d72d2f88f0e06c7c241ca3a0e31adc76242eabb604e626e44697775c4e6d6251fd9a93fd2f257aeae7b52a445b95ee5ce7cf13244e34", 0x6f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r3}, &(0x7f0000000440)=""/243, 0x8d, &(0x7f0000000240)={&(0x7f0000000100)={'streebog256-generic\x00'}}) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r5}) keyctl$negate(0xd, r1, 0xae, r4) 22:46:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x9, 0x1cf7c4cf, 0x8, 0xf5ec, 0xd59}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:37 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 416.826919][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 416.837388][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 416.876564][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 416.917655][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:37 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 416.958161][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 416.997798][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.027763][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.088565][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.089010][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.089438][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.089853][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.090267][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.090683][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.091107][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.105904][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.106384][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.106814][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.108110][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.108591][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.109043][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.109473][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.109906][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.110288][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.295288][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b510 returned -22 [ 417.295883][T22213] binder: 22210:22213 ioctl 4020ae46 7fd3c032b530 returned -22 22:46:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f086", 0xac}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:40 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x10d00, 0x3) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000040)) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000280)=""/20, 0x1000, 0x1800, 0x100000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@broadcast, 0x4e23, 0x7f, 0x4e23, 0x0, 0x2, 0x20, 0x90, 0x67, r4, r5}, {0xffffffff80000000, 0x86bc, 0x5, 0x0, 0x1, 0x10001, 0x8, 0x1}, {0x3, 0x98b, 0x0, 0x5}, 0x101, 0x0, 0x0, 0x0, 0x3, 0x63e1b36b431e5c52}, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d3, 0x2b}, 0x2, @in6=@remote, 0x0, 0x2, 0x1, 0x3, 0x7ff, 0x6, 0x7}}, 0xe8) r6 = getpid() pause() ptrace(0x10, r6) ptrace$getsig(0x420d, r6, 0xffffffffff600043, 0x0) 22:46:40 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x11, r0, 0xffffffffff600041, 0x0) 22:46:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:46:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0xb2e03, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000140)="1edd6f", &(0x7f0000000200)=""/83, &(0x7f0000000280)="c25e7ad6cd4624d3ceed20e09b6262af95243360576805ba652b00c318bb8f6686a52e9b5fa7c69f8f76719fff64d4c51083141a71d0c1be39e37b237171bf95a8937bda0a052dbb988a28f95ccdb9f2f7bbb829c4e234adecb498669f3655ee3a8505f8ed3e3ea73072703161936e47d92213db48d7ffb03c991c11a48b2f00c1c8823d5cdadf079ffe0b999db13952f6ba7ec0d7c7eab700481a8b1479eaf9ea091c", &(0x7f0000000340)="c5960506e0c4252d352f63a6f874f2c858e175b56d6c52c710bcb9f08955cfefaa2eb44e26631093a49418fdf806b2a234e3d1bfc94656cfc83567160db2bf17379625b9d6dde63fd7c17bc8ccc83faf25581c95a519a4a11a5e144f6e6c69f22e855e7a4a1898ecd984cda0e623f49b86169c0876f979f49a62e0c0320c6c9a9b122021069a70f9cda0163411f25e232a36fe783f592985898510428a29179475625c8c293ad9593d6446516f53113d6e4c648537f6ee456e2a00f9a233e160d18807a318e68408299c", 0x5, r1}, 0x38) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000580)={0x2000, &(0x7f0000000000), 0x2, r5, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:40 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @ioapic={0x0, 0xffff, 0x8, 0xb1, 0x0, [{0xff, 0x6, 0x7f, [], 0xe3}, {0x9, 0x8c, 0x1c, [], 0x9}, {0x4, 0x0, 0xe0, [], 0x7}, {0x81, 0x56, 0x1f, [], 0x3}, {0x5, 0x6c, 0x80, [], 0x8}, {0x20, 0x80, 0x1, [], 0x1}, {0x7, 0x1, 0x5, [], 0xc0}, {0xa7, 0x6, 0x77, [], 0x40}, {0x80, 0x80, 0x0, [], 0x5}, {0x2, 0x4, 0x9, [], 0x2}, {0x3, 0x9, 0x4, [], 0x40}, {0x1, 0xff, 0x6, [], 0x17}, {0x0, 0x4, 0x4, [], 0xfa}, {0x4, 0x4, 0x9, [], 0x56}, {0x9, 0x9, 0x67, [], 0x40}, {0x80, 0x5, 0x0, [], 0x20}, {0x8, 0x2d, 0xff, [], 0x9}, {0x2, 0x2, 0x25, [], 0x7}, {0x1f, 0x6, 0x9, [], 0x20}, {0x8, 0x0, 0xf9, [], 0x90}, {0x7, 0x4a, 0x20}, {0x54, 0xff, 0x9, [], 0x7f}, {0x0, 0xff, 0x1, [], 0xf}, {0x1, 0x6, 0x7f, [], 0x3}]}}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x500, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r10, 0x0, r10) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180)) 22:46:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:46:40 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) r3 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='GPL\x00', r2) keyctl$describe(0x6, r3, &(0x7f00000000c0)=""/194, 0xc2) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) getsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000240), &(0x7f0000000280)=0x4) 22:46:40 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000280)={0x0, 0x1, 0xa1, &(0x7f0000000240)=0x7fffffff}) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '/dev/binder#\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x8, [{0x1, 0x5, 0x0, 0x4}]}, 0x28) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VT_GETMODE(r9, 0x5601, &(0x7f00000002c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000180)={0x0, 0x9, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98091a, 0x81, [], @p_u8=&(0x7f0000000100)=0x9}}) ioctl$KVM_TPR_ACCESS_REPORTING(r10, 0xc028ae92, &(0x7f0000000200)={0x7, 0x67}) 22:46:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121", 0xc9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:43 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:43 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x8) r2 = getpid() pause() ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) 22:46:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 22:46:43 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x15, r0, 0xffffffffff600041, 0x0) 22:46:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x9c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf1ff57e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x1}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5001}, 0x4040004) r7 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r10, 0x8008ae9d, &(0x7f0000000000)=""/50) r11 = dup2(r7, r8) syz_kvm_setup_cpu$x86(r11, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:43 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x2, &(0x7f00000000c0)={r2, r3+10000000}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x79, &(0x7f00000001c0)={r8}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e23, 0x1, @mcast1, 0x7}}, 0x6, 0x2, 0x0, 0xffff, 0x4, 0x400000, 0x40}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYBLOB="06433ebfe469c9dd43ee13f635f8fae1bacd37bc5499dd927267dbf5816bb2f10f7176d0dcc144c3b4f304bddd506689f9ac5c5afdb8136dea633fa9cb8fc6837fd098b86578ef10fc0586bef2fa88f40d3180e2fffec7df3d86470c4ee2640ce7"], 0x12) r10 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r12 = dup2(r10, r11) syz_kvm_setup_cpu$x86(r12, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:43 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 22:46:43 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x9, 0x9, 0x80000000, 0xa49, 0xa1, r0}) pause() ptrace(0x11, r0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040)="81", 0x1, 0xfffffffffffffffe) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r3, 0x0, r5) r6 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040)="81", 0x1, 0xfffffffffffffffe) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r6, 0x0, r8) getgroups(0x5, &(0x7f0000000080)=[0x0, 0x0, r5, r8, 0xffffffffffffffff]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x1088, {0x80, 0x2, 0x1}, 0x14, 0x0, r9, 0x4505, 0x4a4, 0x210a96a6, 0x80, 0xa166, 0x3ff, 0xdc, 0x3, 0xfff, 0x2, 0x4, 0x40, 0x5, 0x200, 0x6}}, 0xa0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121", 0xc9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:46 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000006e40)={0x11, 0x0, 0x0}, &(0x7f0000006e00)=0xffffffffffffffd6) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="9a982adea795cf368b4e42186b9f49afd0194f1dc5e8ac5188c0252c0ca610d77857e8130e837df6f8f1c87c3121bda29fcfd468e924f2def7b2547902db48dd1e81ecff902ab9116a8bbe455b0425805b374dc7c80bde1ccdbf7d7c643a345633df73e89ccbd1ce3ec0cdcc873d20445ba844f7b5423cc20980d3647675d2d20b5643", 0x83}, {&(0x7f0000000200)="19ac2d09a4694aa9fda31256bb4fff43358eecdf3fbd447508b8db4ce4dc47b9bb2bd0af86f7457709ca5b89e03fae88cdedb247c0babbb20569056e4264c385d5c883b8c4d06e14db0fbcea1765aff68d653f1acda28e0050123e0c3544414f77ff9528f2b06c7ba54cd70565cdf2de60bf5bdd6b6c1ebcd09385b2b9cd3501475eb85f3fd58ae94e1da2a5afa98201f945ca52092a036ef7bf871caa3e9f4de74043369d9fb2d48572037c40ecd0d6af3abd58cd05ed3a5961b932e67d295416d3d62595a61be63174f18d8cdc4201396a1ff7cf6803752ee30171303e93ef78fb0b92aa7d84747f7438a7e5c433cdc1174f9c372f", 0xf6}, {&(0x7f0000000300)="3c4b26efde7581a2933204936384cd6c08f35556cb187a3adcd1c172fd55d0a581425f26577a7e04606cb10c3308d6e1cd9ccc42c15a77d17ac423e3d5e203e7122d80aef927afc88006921265f6a9b55ea2e9e839", 0x55}], 0x3, &(0x7f0000000380)=[@ip_retopts={{0x78, 0x0, 0x7, {[@generic={0x88, 0x4, "ba56"}, @noop, @rr={0x7, 0x7, 0xd1, [@remote]}, @rr={0x7, 0x23, 0x3f, [@multicast2, @rand_addr=0xffffff6f, @rand_addr=0x5, @multicast2, @multicast2, @empty, @broadcast, @remote]}, @timestamp_addr={0x44, 0x34, 0xa0, 0x1, 0xf, [{@loopback, 0x6}, {@remote, 0x3f}, {@remote, 0x56bf}, {@empty, 0x7}, {@multicast2, 0x5f8}, {@multicast1, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x78}}, {{&(0x7f0000000400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000440)="7b6acb0d1b6b33711237c5b8610f3b084c24fffd508ef6263f4001bc30beb623954bf8cc21bbf447b0c3b908181869508e55f50b208fd903675f9a46867e963ecdaa8a89e054e7f6d28ba4689006cd017b5001b89026ef63589bd120e92e716d3c2c14ad10b5df8c2c46103a91f06a13024743bb7277633c6371d200d9f689dbc87cc1b4e51d172f782e1833d3e262389218310068095667d6514cac0ec0bcac20aa96e5ec33975346ff18", 0xab}, {&(0x7f0000000500)="a55b9414c90d6627be58c05381f015a36e69e2eeebda822a0c10130c2847a04160514f9a184f14a873ff22ccc4ae4affc89abea8e704aaaf8f06a7b7fff36626038bd1000bd92ab8460555c1c960a7", 0x4f}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="f5f03d3613c55d5cd8cb8f962e73f5ab35c6a1f21918e2d19133b99ae4de1f1e1efb76c2e2f5192a754239a6067c6ba47662fdacacc7aa15243010f11fa1eb68c68b7aefef7f350d4b1fa6633e574b901d138df18534a09e2fff6ed207196db1938f64b434470e57dead7b2f4821e90b81e0c224387bb848f77eada2a7379d63ae49597bff4614048596c8b4b16c283f6f6de4e33a1295393c871779b9363fc06573d77b5953", 0xa6}, {&(0x7f0000001640)="60fdd9704fa9261d9aa77744c6ee05e3f9358976e2c16269f0a3e2a113725efe3c7c85515ecc407ff1c4f3eaa964097794d01548b0643542a7e1cd84bfb45d9c5ff3f2df9e9c06c4545a98e67111a334e5a928cfee16b83986b3122dcd7885e578d680862953f3ed4be2034312a170848e24b48377930db4b791a477ddd8dca6b5ce7d188cd43b8421d35457e362a2507987579fdce4e08188335f408137c014afc3bb0ba5ef29703319303e19c118783061aa3a7f7a0318dfbff7db68214833e7f538bb54ecb441ad444999e3", 0xcd}, {&(0x7f0000001740)="80e42d9fdca8b89a280fea5531f535a6eb079ab6b656df82b5b089e69cf63c7e32d00bb9eb573a2bdc9cc554a769d25bfd20422936e75ec60987a0f3d500a9450c48ebf40486ff03b01d695475897fe2e7ae4908977020080afa358033aab2d36a60c6400e7b23f82e027a3c83a1f33d37cb3aa45a242c", 0x77}], 0x6, &(0x7f0000001840)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @cipso={0x86, 0x17, 0x0, [{0xe, 0x11, "80addfb39c548b4fe90abaa2ff4d40"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x48}}, {{&(0x7f00000018c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000003b40)=[{&(0x7f0000001900)="5d9e202ab90ad7931c941c8ea149e33cb3d32892f4a1af79c5a25e138f91c64ce519ad692cf69b769ae408c7901d302bb0c9b9d1d80fbe3ab37bec81d916db720bb0b870263fb20e9188b027eaaa0b811e1a97d4bbb2ff471966b6dd263ba21f1c6afda49f091baa425c24950e63047c754db8ce22faf44599d1cacf285b97e77aee2bbdbce7022cdf56c03c910ddd0f07dfc6d556e50cbe80fd90895681a6fb1f696286f97c953830499b1e1232684deb90dc113d8cd2bdde7b55b08571e41a899ff6a6625a91d89b205e0b1efc1ed029048fb9a0faedbbf39d13d3f371d7c0674f4e1a22c151129a9008d53b6987e2", 0xf0}, {&(0x7f0000001a00)="d6f45a762a", 0x5}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="6de2f0a660326e7054a8cce5361d2cf420b56145124a2472926ca336cdac449e5f80547f84194dd820aee6cd1a81b69b3eccd5892d1739418d43fd514964eafe8b78af20582bf619580298cf6ec8b6774a68b70bb93712c26d0fffb43e779759f9dfe6271d210cf8bffe1b8bc7bdb52089de", 0x72}, {&(0x7f0000002ac0)="1d0bdcec8ea65a9579c6d635e09f679047a8ff431b302566b90a90dc1150e3c918bbf424ffae7a1f55906379d281f42d5f4ac66e5af73e20164dd0000715b4dd12283cce0d1d26fb9b76e1962b3f27f8c756618f73adec4a7291449acc42fb94cc30a0d12b6478845c64011b9936dfdedd2b18ff37a0c968ec91a9813f637ae9491675804b64a97d5cb630cfcb6a794fa77a5d2893b0f6c98d8a0e286c11ee01cf07d5179bf53c6db7c394ffff08159c5496df7e617d57bc3578c4426e4496df76583e7bd34abd9ce19e2832d6670c4182905afa895a12029a0fb99b98371595cae49117f9da13da6c0ee7d89f1a68ce4aed7fd8fdb632d986bf896984d5f46b3c45fcc745fafa23cb39e46aa1e0ee51562580ab81354ae4387f900dea1807d03e08e8bb1ae8b4c159222a9fc350ce9357d799440e2175b6b89ec5a54fb783909fbc0b3bf2b274c261065980210a4043a40b38ed21a9fa01c9a99df089b80a0b2fc3c8a98d7dca6c50b017e066844cfa1fbcf04c365ca82c892f7e636b366a921048949ab20f012a10b86580397a813a62f9ed79f10d0a684f3d98470948a41a89d5b973467c657a564d3653bc5cb55192925b6c1388e0982989e4718bee4e9eb6323950b08b722ae5a09e1d719f93551398bef514421347d52f6791dc48148bea64a3c385b925483d0c7d9c8c3e9848043b3839e4de103007602f9d3ae52db2f2bd7feb7b3483df1e241e09be03590eb91465aaad13157bda6677b03f2b0e058a98b2c3a8d27fafce370a09bc0a7133c75761eb54e9577c77d16d9257cf0a06a61945a944c35fec4e1197a58b76d4a49d977b0a567d793178828f383b451a5d4e80f8c7947b3f74c89fde7d90f14852b42e06e4d9b3e38476e18c2931494d65b613e0effab17cfebdeca951e55f63c9dcd6b6ee91f1301777e0b96c96ed5894639ec8fb971709a6df31d3c38631416c71ea642d2132c7d80b9ae70395b7f08182336387d18b0d3cfc2aa47ea76acc2ccacf3171f179f45ebb8e21dd81ec88dc6c88180959bdc06ffe05ff33fb5698bb06478c36747b83b3d24c35e9ad7a3f684fd952d32f214cc8f39b602ea550818149d13be168d3f0b958e2668d4d55e2d066f78f39f56bb0f61903994e174c6c9195e5923c1ebad41abf88d2a241d1a03b17586f5ac667c4c48b5eaa0dadc09d55f425f1425f779de5abd77b1b7a80e211e9995ec10451a1446b5ced311829967182cf2b79fdde6077f359adc99697c1865b9cea20cd8d743da7a1814f7900dca43d4f58ef116f67349c8391f80868f00385e812a8a106b4921ed161da77d630fc9f9b8ce9a49219d24f7c215d7c913c702f3a93f2aaec9f1788227b4e87e2b20f3d727f9ae379b8966c7b8e10b411fddd745e69e480f2a30416210f5b580227ead559020917642610ac964d087ca0702191c0bbd3b3daf5d900099ff14562ccd2faab46655c0fb97552d80ceb1df4ee37b48322ec6ddbfdd65af600d82ce0aaf66824eca47c08b38526819476962cd857f639a918f6440312263c245fe1d91aa57750925339d798cc24bafbe4f2da728f1274116d76e356bb0acae0391fd48e9b254f440cd519cd7babe30d2c5d272f21093593d44c7c8e2eaffd6269d407ca88debc873e0a250aec0f1534d81f840783be82f89cb3705cb54533281d6fdd0c8d9a01f369261b382c14ad099d1f92337f7d98622065e306e1722efab14ec4e4f19f351e6ca58e7016f8154bad97d54868221e617a4b6077758316cc736f18dbdab42b4cfbd5b1091be5d08ea548b0978a899e549a21200a0641805ad43abd0ce20bf5eddd067ab20174e80d35a936e44e065e3317f16a4cb6a0f657b456e920b806e6f513666139b9657cd481c4b5bd177f812e46623c77b18b25b48fcc2fe8de9e836f1d9379f7d55e5b26d2da21426a7ec924c174859f8c6785e9a135735cbc614e557a40679caf9e71582e8e01a4f493b58939788510e77e45312579c9b8c4069c71b28f21964db781a0a33b7443e2e04d174da6cfe9954bb922e299bcd9fba8b0c457135156088dc14fa39e52eef627f9c3f8bac760a38902df22c6b603b64fa9115fffc55bf93a1ff79049104b3f8d8a56ecfa1acb17b87965c5ad747a85b87a0d73eab39414f8150fd5db601b61c3c6d4ee018a4328ec47aa067b79ad36261687f92c3bf35a8363ddd665772e3c1c9fe897c9a5913b24f03694175b4521c185f91790a901b9312e060cc654c7951770cb7605096650db74d72c84eba09370828b46ab884c2447d82e30303d50799e5a5623f88953f7dffe4d6c35a7f43c16c42f80d12dfbf1647471069523ab1040843ac2553e3df7a59e49840f39f80d19805a06412b0b366812bbc8515121aefeb0b467f69233bd8adce1817c5519ba3273a050243e9b0d50469e14bc0b4cec6fb91d3b3b6a0d60d26dfa6e772ded14466c06981287430b86972f3c49f5d70cebe27d5edc8ef40af79d88cb98149829fb14c861110406da2ced52844ab4f73808b016c1e34669da4721337eb2e7eeb563b62ffa0939b757d5f6e4c998aef92ace8937ecdd321d65887d152c9b4a68ce713b0c8d253abc8a506f9dcd6960c4673f22ff4477081f84cffea27624a12e7bc0646ba1270f254b20691a20dd1b762a31c51cac66b58f8ea4a1ac68ee3d205c6f8c385c9dab8bc8e0ec33f6a219f6fa9b49dc20eb1ee49ce8bc29c7f0b5dcb1f73597a0238ff7a3737a1f0e3acc50778e48c7bc42b9dc965b1da288f83930bf316dce48e1ee679219b1aebca3bfc09884573414d6c4ca039339e7d38718c8ad3ac4335ea3d819abd12b9b89701c2181c9cfa57e1d226ec150b8bca80601badea85d940c7f73dbab8c9740c440dcf7797612626e30fa9952944ecfeb4023b0a0e9cd082912394ef69b97c4d2d0a1de16af26aee9c269dd405ab418ab7f9c6548d4e0e836b2382c5785800e5e3ce689f558c82706a8f1527504b5354a42e4e57ce24d96eaf80b1c189aded37dd73f03f24194526d2b6a371293cb70959a8a529d40b9be48e8590f12f1827812df1c793cfc572302022fe6afb816804b52e83ab78094606ccaecd715caefc8ef1bb74af421c2ab9caa89e0d3174ba7a3fada60c1fa198e72458fdd246f8a4ed3c548b3cf1a8791c6d134e64790671de36397fcd65db3d70542d1b62f7804407cf6322908317487889ce1cfbf491bb0aac368293b0123d5e7aa2959d7d40c810ef927b0b88e5cc58b9eb33066876e19bd195a9729ec176387accc08ea9832638bf78c101f59060843931f99216495063cffbeb52482b5bec071057564d889f161a057a8502b513fc5c4a64323f50e4ca773d50f850a2029380aafcc7e6257397fff3a1cee2df90e793061e56439ce5d8665c5f566a8718f5ba6e2c20d087794094493b5212677a59b7b05bf989006af135c48eaeb7808e5493cbfb9371f55e4eaab174f7ada7fd9d775e971a7136d66ec914a330b588d64d2acd0d5003c326b84be7104928616c6f427d41d82c61bf23c10e5a5235b52e42e715cfcc633c45dc0fc5991971f39d3c323266d9feba1cc3132d3e4213dc915ab1894844239682aea7714e0b883c8e018a186c0b5f47794794829e7e1265ca5a67906464a18352abc7cdaf31b80212c394b77d09b248005eaa4c03a4ae48d65ac1badca6b4cff1f765820407ef42834dce3e0c6c61c9431f7635b3551aec05ebf38a051d0ba35d28d846a4f86986d8f5a32a40160cd31437aa3afda06bb362321b27f5880fbfea02e2744dca58c575b51c584231cc2202214a5aadc89010fae58d4a75d44189f65ecf9e63d42b39f0f8e3b8e34beec549f26cf919432c8706ad1e291020b85e7ea3e2c943c75a0abfa8f3de4e268cbadc8060f100e444b445fae4e37e70f053e2ed2598922a17b7f54e75d580cb5dcb40fb0a83710112c80a69daffa3c388eb491e8e97dc706e4e966bf35f8689c8ee00c24c4d8d5dbd1113a25a77eab2f3f424a5ac2fbf90169b72376db604dd7b136198d5378b050ce58266e0a01a6499f64fdfc1dcec86cbf6b16028deb6c1387fcaae3df825c42a2ca10de053cb79bd29ea32b1e1314c4ae734bfd726907d93ed3f2ece81b943c9dfbf43b273b8f9a9230bd3b06b3ce330cc37ab6404ca0bc16013a9fecdc685e5a4b18cc573ae8fba5b382c36b4dfa07db41d472fe17ca52526546d8c2096b4863ddd8193d070d961526d49f60ec7fc12bd7e99a33c8f53bd9e36e500422fbe5e63006a172fff1ebe060b60d99c53134bcf1dfdab30ecf7716b4528a1a43749baa60c891a6178f2b0ac09fbac7f8b2ea9105571b8720a250a5f5a022321c88209348bb128f0af9a4cef965cb96c96a5bf1980662f9c500724b327f5a40671f54544ee694d3d826819b0ff615e7e50fd08aa21c4a9578a092ea6b9630d002ef0636d4162e96122ea67cb1e622f7c03adf0a82e2b165c6f2ab126718eb5505f53a20531ac504b9b31f0e69906fc6db37155dc9343fb3f7d6b31b981b62fb41feb3c1727096640bb8edbc367892c02d5b5d878e27fcac1d010590d7aae61ea09fa9c73a000d1350e8848724f2ca43119004b5f2370bbe3f68dac858a0784e3af23af84ef89c198b48f13a79119594e0c7883d4182cc25951cb30c02745bb7754e33436a49b3821052e8167ca04c715886283bb9ef031fdad57c7faae76e4c5b2b7a5afbd63aac892c27379033cdb76f9129cb8ed8f9f77273c55296ff74dba40db6a051465599e0d506b17905d8e363099ad3a93543ede08d0335aabf9f4df8f63b503040cb45d2b02f467c547fad9808d4ef9c944b26feaebc8688d6abfacc9b0bf145a88a2f10f531ee5cc2dae74e075ff243caf6265190655528f7e3e7762c056e84383f415a40761818943930c3aebd1ed774fd81d01f3fe9671957141c6ffe27976c2d3963b9d3a33302c8f932644e1d133873761a2927587a11dae5d74e2dffa92e5f464ddafb0b8693a72b1d6efffe720539e8ba485ef37419fe71fd3f21d3560ed9070e91c2668ec5e0a9b27d2a7517dd47cb4c62a54d5c556255dda1e90513d32d0b2c71eba35449475acc1d565144960a02a2c5050ba6e138efb2557859d22f4bf9e85d532508a399390dd8caa77f2cfa636858ebba0304201c57ffb3fb9c3adc5b7d0b98c3d4658797ffe28841a84bc8ece7225625e79e869b36b89c1cabaf24561fa37cb6eb536c7465288da4f7a8a150308340636db6034206a35caed9d89ecf4cd32b744c3edec9f746b6a88acfceb7e1ed2be2ae49653b20cae49235050b0faf769bf1d08a10184ffc7a800948d1f32b0fcb3bbc1f57ceef6d85a137d93c2c2a3a3890e8e9d7b61decacf734e8e1571c01f59327e88fe92ad02f716e096944a0a704956c07d92bcd5ac6b0fa52baf7081321991174e481485b45657525f097b3d1eaca40279874e6e156db3d1f916c7307394444cc98824c0615a549e0af964b94ff7f1c3b7518b63a92b9db9e55e0159c69569a635b0f88411c34f133ae0bb6516e675b4f7579a2803a6deaa05ab731fa8b42ab43b2e3c2793d8418e2f851180f5ae659b456f62d60842af5a4a696cae4f513b6602f11821bc8deea4c4182253634b969469a664ca17605e31cc67e5d4f08d634eb8bd6c03397e7e85514a0681133a8362df6fd44f4b98026812b0abe6cfd24c87c85dcb35aedbf299478e2e95cfd27fe9606a6d64e60c96c2eff8ebd8f8f6088ccd14de2225a303073293b97931a0e2860195397e8ef", 0x1000}, {&(0x7f0000003ac0)="8a3a63e0916caec41cf69acb825e1d288b1eb0dcb7559cda6e17e69778589de99b0bc1db2a64db1a0d6fc213e000099c65df466e13bfd8ebf8b5f14b0588ab82c96adeaa8874991bad7358d80de8c8b4a66372d803f81c7b0c0d8cb3b6331139fffa6e5b9ecbbcbea5521a8b", 0x6c}], 0x6, &(0x7f0000006e80)=[@ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x94, 0x10, "7e0019cb821a22e59b171e1a00c7"}, @generic={0x88, 0x12, "b97b00010000818dcc781e1f750bba44"}, @rr={0x7, 0xb, 0x1c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}], 0x70}}, {{&(0x7f0000003c40)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000005000)=[{&(0x7f0000003c80)="b041fcc3be361b47bdc92db6e01165304ad84bad3a22e97835f1ea0440ffe568cae4a96529c06bde01d90d4932fd39a20bfd", 0x32}, {&(0x7f0000003cc0)="04dc9e6695c89499cbe400ff2b0b29c375c8578d9c3a1d7b7a250cf07c3ab1ffd262f6bedc6bf2154c8ca7ef1bb62e7b187374f3a85e856b39b032da16c645f96c124eb2d12a5c6e0b14e9ebf382e13c023aa867d5228620bc749215c76a12e33ff47b72477ace1f89083b83abae769371146d00fc5568d1182c5902d0b3cc5826dff355328b337167c26dd2841f8f6261e1ac2475ea8416be1563cab83030179d373c3daa5b43de5f95f5af21b32b5d74a561125f227e0581b47cb9f066fc4a784d8733020472a06d86b39a77a93d1438be20ee9f4604f7cd8c212b025a0b1da590d09db3f68d3a", 0xe8}, {&(0x7f0000003dc0)="d6e1a230a34ed949a8", 0x9}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="0493a4aa2ce473d29d75a000a42ce70fb0510716fd06912180b36b11bd3c43b5e3de8dfb7c894ddc7784523fa7436ccabadd5490dc0cdb26eb23dd6cdc0b370d0db4e56d84fa72568ac3add7ac1cdf85069f9d4728f77c6012d5acb45f85b1984d84d57e88603e6a7d01517d5600afcd6e5d0d7c6a6b511c9adaba4bedb1019a60a287a98326588822976373347796ae350a34955bd71e4d4c9dc3458b363088013f4431a243ab59637f08111ff2bbde65c11c5c968d9f3a1c53658ccac476f7dd367577c5c1b9123838e6142792419384aba43a4dd82fe5eba4451d2ca521a5758710f490063dd919b4286c8c09b92c85a1", 0xf2}, {&(0x7f0000004f00)="288cf60b31e3b1c09759cfadd201b76a8df170eea1892cd54ef317de89f4cb5c09409c42a8c4040353af59613a526c4c3e9bc88f1c10a63e3c8da8a86177c043194736769ff3e62704db5d4d6af4297230b87d9e3c872d3f80292c52f37b0a4ec32d2f59c43c0e8ddf30a7f754a5", 0x6e}, {&(0x7f0000004f80)="601433d241c7703d214791ab7bd75ac6fe6886f97f5fd5c30ee59f6d01d493abf2b0b31900f27432cf8e2086a84adc8fa51c21bc20faa12dbcc907853f2afd633e7042fc1989e7f7a0d537df703f90d45d", 0x51}], 0x7, &(0x7f0000005080)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ac1414bb0000000000000000a8000000000000000000000007000000442c2841ac1414aa06007fffffffffff0000dd88e00000010000001f0000000000000003000000070001000094040100831f89ac1e0001ac1414aa000004007f000001ac1e0101ac1414aaac141423861fffffffff02075ec6ce58dd0708edc5730a6933020a18b7c8edd60673ea89274aac1e010100000000ac1414aaac1414bb00000000ac1414bbe0000001ac141410e0000002000000"], 0x1e0}}, {{&(0x7f0000005280)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000005800)=[{&(0x7f00000052c0)="6116c7f30e048942a945b60f8eb4348492176fdd27909702", 0x18}, {&(0x7f0000005300)="fd42d358ba7214fc29afff32a4eef294fb157a12b69b9d2ce849ce0ec0698bb34fcdd6d22b73332a17dc44360c272a4fb661aad7c0d944621d2104f59451b75099fe5326de3ac66cbc6bd965acffc18e5daca2e81702d5438691", 0x5a}, {&(0x7f0000005380)="37eff81379632569214561b872b4b5947bef1b14726689a317f539fda45728b28d47bda39ae04c4d74ef001f9e94c7fb0083cc8cfe4086ac004886c240a782b6c30eb208e803638a6d45a930ba982514db1625893eb245088e57c25f95dbd599a1efded68c480ee5dd5de4fa2d25f98d48b2e06b64631e0e092a03c616660cb93330cc6b62df8fabe42733cdb681db94be224178e36594ffe23ce97910240b546548b152ce8a2ad59044b1c3c0c88f20d4c7e7", 0xb3}, {&(0x7f0000005440)="4cbfc5fec082e25b8a6eb43c4b6c39c976180ed21578d6f2ca0dd56de43db61eb090fe6d202cf4534eb9213bc76262", 0x2f}, {&(0x7f0000005480)="4734e5e445484596e9ff11ea45fe917ec034b317957e744d7ae28ab77b7b0954dbcd82cc8c3f895b10fbd79bc44a4fa19b10a1ad2174ad9cacc362e40e0b00e91076c83d01576b36869d8806ee6e7af52d545cf15ba957f8ebcd551ba3f4b7dce32030be147588fa644b4ed3784342ebfe1094e328c044abe4b13a89a98de74966351b76592360d752e8d567753750b5f60ba9b4488501e9952962318c4edf6ec2b98ed13372d8878b55647a1bcc7ded72b27f103fa7b5b0a5b37e2f3d57", 0xbe}, {&(0x7f0000005540)="f1d3ca362ba2636c1c118928d5fe15e2f03e7ee2bd8570e4eeff7c77f12d3110fa0843670a4057821e5aed5da1d4fdbf3436", 0x32}, {&(0x7f0000005580)="81c88f385830ff493712a6c5602f307e96f8ffd84a5516962c18d6b7120c74dd4b1ce944fd54be9eb80393bd5e6317c822633f0fde9f318e32a4f208b6cc9b9b00f2e7c44ba5719675c2d4c5277df15781d5c7fc7ac38ee6cbda2d7294ea41f7ebbcedd6378659154db4bc9910c7cac15556b97a2b01bd8c0cb9b226a7c2f14628c0e95d5fc8379dad633160c90798de54bf9b00c6acef3231ff3ea033bfcd82d6ed1f0f8c6f47c184c5a4f72a47490f80016d62b6607113fadfb6497bcf78b5289b953d5e4c7e7e57ea321be33aa964bb91c7ca3cbce18360fe56f45168a60bc443534bf39dd136bbdc72c6eb6ca4db4ace", 0xf2}, {&(0x7f0000005680)="64df9600365b13c01ea973c374884e89bdccec4cb924f302eca65f873fead1b13b959348194e903f70543cd3fb40b12b19e0416cbd5d887bd2d504fd20e4d0ac8d830a5e7d02533f40bea136d69f8b7b1769a8a7407707808dbe", 0x5a}, {&(0x7f0000005700)="60cc0101c42227742ff5f21cd04011a2118f5edc6b14a4130f1256d932878dd5bbffc17c85eb930de970b1a5453e0fd0394431a77dc7e1e88734f334017aa139bcc1f82312863e4974d20deb7b467b0182fde4d5b8f01b417507dd351738b85c8ba7167adec2b7b21900e886f1a0086ccfc27d5a5528efdd00e6078f4401af8de7e411d690c06956fbc7ff0cfaed10a0420154e54ac8ccc634716aaa8c06e3172c29b269d521ecb1e71b7b33f2a6c5e0f886f5e7b2be04c2efeae4f39182fb4ec9ecc8a4894adabf6ca40342935c102cf26900ef9204", 0xd6}], 0x9, &(0x7f00000058c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe609}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0x60}}, {{&(0x7f0000005940)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000006b80)=[{&(0x7f0000005980)="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", 0x1000}, {&(0x7f0000006980)="f32aab6dcad52d9362795049a9dbd101c82c158dcdee9c0d00ac7e89f5d66f13c137b7b9a14a30d6932b6feee6d70a9056e628c43da5ca0e6e8b7e119b03a4e22a315c867a", 0x45}, {&(0x7f0000006a00)="7a3d9f0c5dfc378a3fbab202b5595cd0f458a0c67cbb873d7734be00d213fe12f52bdb1c42ffc4c06f8dfaef8334aff18ae1b442462af161f0337fc1b1e13cfdd051d1bf7b7eb9a81ce8c087224e258f868674dbcbf17c07fcafbe428987f14c918d83458ef19d10332ff01ff8ea99333c6db3f0037bad61961303982d10d78c31fd4bf55e34ccd14333dce41e1d68f6c32394d7f8", 0x95}, {&(0x7f0000006ac0)="d1994c2ca3e05af53429b92a3b1e7f8acfed347f80e134b15aab41377f7544bf938ea9963fc45d295cb8acb1e8d9b93b63e784be9ded5a0194d6067bb11deacfe9f2fae7778639651d178291393f0586ff46867bc41610cc4e9e5713f26c68f2a8bac8034a13bd5890720028599bc7c6c578ef9b480dfa860388c892cb75f95ef03a73f5a2511ff309b785fe4b9c5ae010b3a63a411c90f01ba482e42d0ce89462b5edfc3a18b52944bd5e02e38355cd8c36b3fa562621a23d3295b45ddaa753", 0xc0}], 0x4, &(0x7f0000006bc0)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb9, [@loopback]}, @generic={0x86, 0xa, "0dabc77bf7199efa"}, @timestamp_prespec={0x44, 0x1c, 0x9d, 0x3, 0x3, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xb7d}, {@rand_addr=0xb612, 0x6}]}, @noop]}}}], 0xc0}}], 0x6, 0x40804) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r9 = dup2(r7, r8) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:46 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, 0x0, 0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() sched_setscheduler(r6, 0x5, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, r2, r4, r5, 0xbf5ef8424b5381c3}, 0x0, 0x0, 0x6, 0x200, 0x7, 0x9, 0x3, 0xbbcb, 0x81, 0x401, r6, r7}) ptrace$getsig(0x420d, r1, 0x100000003, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000080)={&(0x7f0000000000)="c56013a91256518157ed22e153276e419ad60c380b1fec218310b3a0315be80ba55d5cd49d27988357ec166919b174efba04ae81116a6da596d4fb189f919ded90df678ebfa2f3e6abc4a18cce64520559573a33735774597118ec9a935ca5acaa085e", 0x63}) 22:46:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51b3e8e6aea4a8dee825286b31a260e60482bb0b40d9b314d", 0xff7c}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 22:46:46 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x18, r0, 0xffffffffff600041, 0x0) 22:46:46 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r0, 0x1, 0x1}, 0x40) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x518000, 0xffffffff, 0xafd, r0, 0x0, &(0x7f00000000c0)={0x9b090c, 0x1, [], @p_u32=&(0x7f0000000000)=0x4}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getdents64(r1, &(0x7f0000000200)=""/3, 0x3) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r4, r5) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:47 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 426.334087][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.348542][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 22:46:47 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x1200, 'syz1\x00', @bcast, 0x1, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x42) pause() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000040)=0x3) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="b644b0884fa1412feb833b5b48bd9a90988449d5aea70a145962f3624d3f0408c41fc67bbef62b6c879574c245ee37fb45fc5807e00a3c5fbdee9ed117c21ced2585ab2b48eba843eff9bc4dddbc77833c655552117c61121a5b0b8e7b5c70755fceb744e317f0a28a6bac502a33a247065a420ddca8a5c29cde3d2fe109c97655447fd6575470de6133459e875bbdc6f42440db81996b26dffc0786d63751074765547efaf178514cb1062d29", @ANYRES16=r7, @ANYBLOB="010000000000000000000900000030000380080003000000000008000100000000001400020064756d6d79300000000000000000000008000500ac1414aa"], 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r7, @ANYBLOB="00022abd7000ffdbdf250200000038000380080001000000000006000400ff0000000500d4007f00000008000500ac1e0001140002006272696467653000000000000000000008000500899f00003000018006000100020000000c0007001a000000300000000800050001000000060004004e200000060004004e22000008000500ffffff7f0c000380060007004e240000080004006100000014000280060002004e240000080008000008000003ea5d0c62d1c5d358da81947384cd0c7c08c8dea6934d81e47c9543c46764b110725dd4bc536c18fd661efcb0ec69bf074263bed4c2aa4bc0153587fe2b0fca0a34e3ece707281624d97e8e3f"], 0xb4}, 0x1, 0x0, 0x0, 0x400c881}, 0x20040c95) [ 426.400730][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.418562][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.435522][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.468188][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.531797][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.556614][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.573479][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.585666][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.610769][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.707221][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.767050][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.798661][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.816793][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.829958][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.875441][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.887775][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.898034][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.909471][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.919956][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.949123][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.978287][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 426.996409][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8510 returned -22 [ 427.020175][T23842] binder: 23796:23842 ioctl 4020ae46 7f19464f8530 returned -22 22:46:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121", 0xc9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:49 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x9}, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r3, r5) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:49 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x21, r0, 0xffffffffff600041, 0x0) 22:46:49 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:46:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:49 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 428.936693][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 428.963198][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 428.978504][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 22:46:49 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x40, 0x0, 0x1}}, 0x14) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() pause() ptrace$getsig(0x420d, r1, 0xffffffffff600043, 0x0) [ 428.997548][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.006365][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.019057][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.027687][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.036232][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 22:46:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000200)={0x4, 0x2, 0xf1d}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r6, 0x1, 0x1}, 0x40) r7 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1ff, 0x100) dup3(r6, r7, 0x80000) [ 429.081694][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.119847][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 22:46:50 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 429.196889][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.218063][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.229228][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.256578][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.264847][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.273346][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.283418][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.291863][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.305561][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.316442][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.345353][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 22:46:50 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae9c, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() pause() ptrace(0x10, r3) ptrace$getsig(0x420d, r3, 0xffffffffff600043, 0x0) [ 429.365584][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.384914][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 [ 429.405948][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7510 returned -22 22:46:50 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 429.438448][T24103] binder: 24081:24103 ioctl 4020ae46 7f19464d7530 returned -22 22:46:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226ce", 0xd7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r3, r4) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000008a0005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db90b8876704f88e8cdfd6ae0470967d141cdd62efc9f57fd744a8f9f1b0b14c8a87008242c8f58dc8b0143c1fec75b5153c5906741138a673fe6f9d86d2d80cff07000000000000001e81089b4c2e12b89b27021fc03c20e17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0xa, 0x7, 0x4, 0x1, 0x46, 0xffffffffffffffff, 0x1, [0x0, 0xa], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) r9 = pidfd_getfd(r5, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000001340)=r10) r11 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r11}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="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", 0x1000, r11) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="327b94c63d409632c2e82d6d41784995b96d7f0f0cc243fab7537eb48a03d54b0c6da3ce1d5bc0496cef2d0e9095f7c0cfd0bf861031e1f41ed5fbbc67758b730f0978da4176dd9e0edb040066e15d8b4ad5c2e0a0ce8ac4bd4fe96a48579a97960ee0def5e3fa248325f1c4bdee43e2600f58640d6299c2fc59f7b09c8da74488daf5fc5bb530c59f929a0d5749dfec8005b884ec98712fa5565420b810715e1eace79a3d5d9c5dc9258ffb6fc24bf7248d502fbb7a5fe545787cc9e7b8dd5a6e609da435db206486aafa55a3afd6422e", 0xd1}, {&(0x7f0000000200)="070b6f9209f99dd0f2d0b6cc89e612075c9483206cd72334b83e8f83c2b99a3582983b1a709bab806036e57a212f6f3b1dfe6289aa7ae95ba893c8f611093d5dcd5ffd80b13aa5cc4ba78ce560000000000000", 0x53}, {&(0x7f0000000000)="6bbb8fd9db06ae22a214d3e630cc65c716afe1ff5615e1d81eff0f0000000000002d0f837d729f", 0x27}], 0x3, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:52 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, 0x0) 22:46:52 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4200, r0, 0xffffffffff600041, 0x0) 22:46:52 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/248) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r5 = accept4$phonet_pipe(r4, 0x0, &(0x7f0000000000), 0x180000) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x7, 0x7, 0xad}, 0x10) 22:46:52 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, 0x0) 22:46:53 executing program 5: clone(0x2000508c1fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffeffff) [ 432.076742][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.090440][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.100082][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.108525][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.116870][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.152466][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.175616][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.204738][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.216418][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 22:46:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r3, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x2b, 0x0, 0x0) 22:46:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, 0x0) [ 432.260541][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.301553][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.311151][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.320544][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.340551][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.351528][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.364597][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.397018][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.423826][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.437463][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.445751][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.456734][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.483631][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 22:46:53 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) syz_extract_tcp_res(&(0x7f0000000080), 0x5, 0xff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ptrace(0x10, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0xffffffff, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, [0x0, 0xa], 0x0, r5, 0x1, 0x4, 0x3}, 0x40) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='selinuxvmnet1\x00', 0x0, r5) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {}]}) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) [ 432.494802][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.512678][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8510 returned -22 [ 432.528089][T24635] binder: 24630:24635 ioctl 4020ae46 7f19464f8530 returned -22 22:46:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226ce", 0xd7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0x100, 0x2, 0x0, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r11, 0x408c563e, &(0x7f0000000200)={0x100, 0x0, 0xa, "11dd16e66db00167da8d18946b99cbcd857712b875cdff971a927caaf2044421d5e8481306e58461b90ed79c3e38baf1c6bfad4acb9b5e2f4ef41f47", 0x5, "c79e26b47a7e282e4d470cddd608dd346198d04f56723af13b81237cf4ce9a2b5d8f86ac419772f092bf5a372ee36142f254c38dea71338648f5a0b0", 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) move_mount(r7, &(0x7f0000000000)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00', 0x4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x555401, 0x0) 22:46:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:55 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) 22:46:55 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4201, r0, 0xffffffffff600041, 0x0) 22:46:55 executing program 1 (fault-call:7 fault-nth:0): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 435.083842][T25180] FAULT_INJECTION: forcing a failure. [ 435.083842][T25180] name failslab, interval 1, probability 0, space 0, times 1 [ 435.097312][T25180] CPU: 0 PID: 25180 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 435.107222][T25180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.117325][T25180] Call Trace: [ 435.120725][T25180] dump_stack+0x188/0x20d [ 435.125130][T25180] should_fail.cold+0x5/0x14 [ 435.129715][T25180] ? setup_fault_attr+0x1e0/0x1e0 [ 435.134880][T25180] should_failslab+0x5/0xf [ 435.139336][T25180] __kmalloc+0x2d9/0x7a0 [ 435.143607][T25180] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 435.149626][T25180] ? tomoyo_realpath_from_path+0xc2/0x620 [ 435.155398][T25180] ? mark_lock+0xbc/0x1220 [ 435.159861][T25180] ? _kstrtoull+0x13f/0x1f0 [ 435.164455][T25180] tomoyo_realpath_from_path+0xc2/0x620 [ 435.170018][T25180] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 435.175657][T25180] tomoyo_path_number_perm+0x1c2/0x4d0 [ 435.181118][T25180] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 435.186744][T25180] ? tomoyo_execute_permission+0x470/0x470 [ 435.192604][T25180] ? get_pid_task+0x116/0x200 [ 435.197319][T25180] ? __fget_files+0x307/0x4f0 [ 435.202013][T25180] ? __fget_files+0x329/0x4f0 [ 435.206684][T25180] ? do_dup2+0x520/0x520 [ 435.210970][T25180] ? __sb_end_write+0x101/0x1d0 [ 435.215810][T25180] ? vfs_write+0x15b/0x5c0 [ 435.220254][T25180] security_file_ioctl+0x6c/0xb0 [ 435.225224][T25180] ksys_ioctl+0x50/0x180 [ 435.229459][T25180] __x64_sys_ioctl+0x6f/0xb0 [ 435.234056][T25180] ? lockdep_hardirqs_on+0x417/0x5d0 [ 435.239369][T25180] do_syscall_64+0xf6/0x790 [ 435.243929][T25180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.249912][T25180] RIP: 0033:0x45c849 [ 435.253801][T25180] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.273580][T25180] RSP: 002b:00007fc3ebb60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.282004][T25180] RAX: ffffffffffffffda RBX: 00007fc3ebb616d4 RCX: 000000000045c849 [ 435.289975][T25180] RDX: 0000000020000180 RSI: 0000000000005421 RDI: 0000000000000005 [ 435.297948][T25180] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.305924][T25180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 435.313895][T25180] R13: 00000000000006ad R14: 00000000004c967d R15: 0000000000000000 [ 435.331513][T25180] ERROR: Out of memory at tomoyo_realpath_from_path. 22:46:56 executing program 1 (fault-call:7 fault-nth:1): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) close(r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:56 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140b, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x30, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3572}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb20a}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x22}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf800}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040}, 0xc4) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 435.677973][T25399] FAULT_INJECTION: forcing a failure. [ 435.677973][T25399] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 435.691228][T25399] CPU: 0 PID: 25399 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 435.701118][T25399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.711177][T25399] Call Trace: [ 435.714472][T25399] dump_stack+0x188/0x20d [ 435.718816][T25399] should_fail.cold+0x5/0x14 [ 435.723405][T25399] ? setup_fault_attr+0x1e0/0x1e0 [ 435.728489][T25399] ? is_bpf_image_address+0x1cb/0x280 [ 435.733947][T25399] __alloc_pages_nodemask+0x17a/0x820 [ 435.739328][T25399] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 435.745054][T25399] ? mark_lock+0xbc/0x1220 [ 435.749480][T25399] ? __lock_acquire+0x827/0x5270 [ 435.754412][T25399] cache_grow_begin+0x8c/0xc10 [ 435.759165][T25399] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 435.764615][T25399] __kmalloc+0x6d6/0x7a0 [ 435.768846][T25399] ? tomoyo_realpath_from_path+0xc2/0x620 [ 435.774551][T25399] ? _kstrtoull+0x13f/0x1f0 [ 435.779053][T25399] tomoyo_realpath_from_path+0xc2/0x620 [ 435.784609][T25399] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 435.790264][T25399] tomoyo_path_number_perm+0x1c2/0x4d0 [ 435.795730][T25399] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 435.801365][T25399] ? tomoyo_execute_permission+0x470/0x470 [ 435.807207][T25399] ? get_pid_task+0x116/0x200 [ 435.811888][T25399] ? __fget_files+0x307/0x4f0 [ 435.816576][T25399] ? __fget_files+0x329/0x4f0 [ 435.821271][T25399] ? do_dup2+0x520/0x520 [ 435.825504][T25399] ? __sb_end_write+0x101/0x1d0 [ 435.830341][T25399] ? vfs_write+0x15b/0x5c0 [ 435.834847][T25399] security_file_ioctl+0x6c/0xb0 [ 435.839822][T25399] ksys_ioctl+0x50/0x180 [ 435.844053][T25399] __x64_sys_ioctl+0x6f/0xb0 [ 435.848639][T25399] ? lockdep_hardirqs_on+0x417/0x5d0 [ 435.853914][T25399] do_syscall_64+0xf6/0x790 [ 435.858419][T25399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.864297][T25399] RIP: 0033:0x45c849 [ 435.868181][T25399] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.887773][T25399] RSP: 002b:00007fc3ebb60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.896304][T25399] RAX: ffffffffffffffda RBX: 00007fc3ebb616d4 RCX: 000000000045c849 [ 435.904359][T25399] RDX: 0000000020000180 RSI: 0000000000005421 RDI: 0000000000000005 [ 435.912331][T25399] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.920310][T25399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:46:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 435.928284][T25399] R13: 00000000000006ad R14: 00000000004c967d R15: 0000000000000001 [ 435.942580][T25175] cgroup: fork rejected by pids controller in /syz3 22:46:56 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4202, r0, 0xffffffffff600041, 0x0) 22:46:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226ce", 0xd7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:46:58 executing program 1 (fault-call:7 fault-nth:2): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:58 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xb, 0x0, [0x7, 0x1e, 0x18, 0x8, 0xc, 0xc, 0x1f]}, {0x7, 0x0, [0xd, 0x13, 0x18]}, {0xa, 0x0, [0xf, 0xc, 0xf, 0xd, 0x1b, 0x4]}, {0xd, 0x0, [0xb, 0x1c, 0x16, 0xc, 0x6, 0x16, 0xa, 0x1c, 0x15]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x44800) r3 = getpid() prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="4bfefcaab877eb6f6396aefe03deb1b76bcd65cc6e2bcac2bcd4968ca6ae0220", 0x20) pause() ptrace(0x10, r3) ptrace$getsig(0x420d, r3, 0xffffffffff600043, 0x0) 22:46:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x406901) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:58 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4203, r0, 0xffffffffff600041, 0x0) [ 438.125340][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.137413][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.158868][T25837] FAULT_INJECTION: forcing a failure. [ 438.158868][T25837] name failslab, interval 1, probability 0, space 0, times 0 [ 438.159332][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.172525][T25837] CPU: 1 PID: 25837 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 438.181014][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.189166][T25837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.189173][T25837] Call Trace: [ 438.189196][T25837] dump_stack+0x188/0x20d [ 438.189221][T25837] should_fail.cold+0x5/0x14 [ 438.189239][T25837] ? setup_fault_attr+0x1e0/0x1e0 [ 438.189270][T25837] should_failslab+0x5/0xf [ 438.189283][T25837] __kmalloc+0x2d9/0x7a0 [ 438.189297][T25837] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 438.189314][T25837] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 438.189343][T25837] tomoyo_encode2.part.0+0xec/0x3b0 [ 438.189364][T25837] tomoyo_encode+0x28/0x50 [ 438.189378][T25837] tomoyo_realpath_from_path+0x184/0x620 [ 438.189407][T25837] tomoyo_path_number_perm+0x1c2/0x4d0 [ 438.189422][T25837] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 438.189442][T25837] ? tomoyo_execute_permission+0x470/0x470 [ 438.189459][T25837] ? get_pid_task+0x116/0x200 [ 438.189485][T25837] ? __fget_files+0x307/0x4f0 [ 438.189527][T25837] ? __fget_files+0x329/0x4f0 [ 438.189549][T25837] ? do_dup2+0x520/0x520 [ 438.203413][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.207153][T25837] ? __sb_end_write+0x101/0x1d0 [ 438.207169][T25837] ? vfs_write+0x15b/0x5c0 [ 438.207195][T25837] security_file_ioctl+0x6c/0xb0 [ 438.207221][T25837] ksys_ioctl+0x50/0x180 [ 438.211141][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.214856][T25837] __x64_sys_ioctl+0x6f/0xb0 [ 438.214870][T25837] ? lockdep_hardirqs_on+0x417/0x5d0 [ 438.214888][T25837] do_syscall_64+0xf6/0x790 [ 438.214911][T25837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.214927][T25837] RIP: 0033:0x45c849 [ 438.220283][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:46:59 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4204, r0, 0xffffffffff600041, 0x0) [ 438.224539][T25837] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.224547][T25837] RSP: 002b:00007fc3ebb60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.224562][T25837] RAX: ffffffffffffffda RBX: 00007fc3ebb616d4 RCX: 000000000045c849 [ 438.224570][T25837] RDX: 0000000020000180 RSI: 0000000000005421 RDI: 0000000000000005 [ 438.224578][T25837] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 438.224585][T25837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 22:46:59 executing program 1 (fault-call:7 fault-nth:3): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:46:59 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x501000, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() pause() ptrace(0x10, r1) ptrace$getsig(0x420d, r1, 0xffffffffff600043, 0x0) [ 438.224593][T25837] R13: 00000000000006ad R14: 00000000004c967d R15: 0000000000000002 [ 438.244914][T25837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.314636][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.465396][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.508339][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.519480][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.528841][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.537777][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.579069][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = dup2(r3, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 438.659380][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.706545][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.735629][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.749437][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 22:46:59 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4205, r0, 0xffffffffff600041, 0x0) [ 438.797611][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.819489][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.840806][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.855028][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.870410][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.887282][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b510 returned -22 [ 438.920141][T25835] binder: 25828:25835 ioctl 4020ae46 7fd3c032b530 returned -22 22:47:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:02 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_getsetattr(r1, &(0x7f0000000000)={0x2, 0x3, 0x101, 0x3ff}, &(0x7f0000000040)) r2 = getpid() pause() ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x80000000, 0x0, 0xff, 0x2, 0xfe00, 0x1}, &(0x7f00000000c0)=0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040)="81", 0x1, 0xfffffffffffffffe) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r6, 0x0, r8) setresgid(r5, r8, 0x0) 22:47:02 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4206, r0, 0xffffffffff600041, 0x0) 22:47:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r3, r4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='schedstat\x00') epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, &(0x7f0000000340)={0x2010}) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x22901, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r10}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, r10, 0x30, 0x1, @in6={0xa, 0x4e21, 0x9e, @remote, 0x599e}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r11}}, 0x18) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) inotify_add_watch(r13, &(0x7f00000002c0)='./file0\x00', 0x40000022) [ 441.275422][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.302018][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.316072][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 22:47:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 441.324802][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.332929][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.340850][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.367356][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.381133][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 22:47:02 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 441.410470][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 22:47:02 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000000)={0x101, 0x9, 0x1, 'queue1\x00', 0x6}) r2 = getpid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x945, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000000000000000a000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000062b94b6e30e7e4ecd89600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a157a60000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d898"]}, 0x9bd) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='#@%vmnet0\x00', 0xfffffffffffffffd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) pause() ptrace(0x10, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r6) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) 22:47:02 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4207, r0, 0xffffffffff600041, 0x0) [ 441.452118][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.488970][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.528828][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.599084][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.638049][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.649344][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.661025][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.671490][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.679679][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 22:47:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x10, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 441.716968][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 22:47:02 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4208, r0, 0xffffffffff600041, 0x0) [ 441.759347][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.781218][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.825926][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.867626][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.911623][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7510 returned -22 [ 441.948021][T26488] binder: 26475:26488 ioctl 4020ae46 7f19464d7530 returned -22 [ 442.432807][ T0] NOHZ: local_softirq_pending 08 22:47:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r4, 0x1, 0x1}, 0x40) r5 = dup2(r3, r2) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:05 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) r4 = getpid() pause() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$netrom(r6, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ptrace(0x10, r4) ptrace$getsig(0x420d, r4, 0xffffffffff600043, 0x0) 22:47:05 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x4c00, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:05 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x4209, r0, 0xffffffffff600041, 0x0) [ 444.346768][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.382281][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 22:47:05 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x4c01, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:05 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420a, r0, 0xffffffffff600041, 0x0) 22:47:05 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x100, 0x70bd2b, 0x25dfdbfe, {0x2}, [@NDTA_THRESH3={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) [ 444.414671][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.431802][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.464642][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 22:47:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x400400) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x4, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r3, r5) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 444.521819][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.541517][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.566948][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.611602][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.631755][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.661649][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.679183][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.694786][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.702930][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 22:47:05 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x541b, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 444.710824][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.719891][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.729661][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.738643][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.748515][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.759291][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 22:47:05 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace(0x4208, r1) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 444.789018][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.818482][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.867661][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.921790][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8510 returned -22 [ 444.933297][T27229] binder: 27223:27229 ioctl 4020ae46 7f19464f8530 returned -22 22:47:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:08 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420b, r0, 0xffffffffff600041, 0x0) 22:47:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5450, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x6, 0x2, @stop_pts=0x677}) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x16b}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) r4 = pidfd_getfd(r1, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x8, 0x1, 0x5, 0x0, 0x0, 0x1, 0x8, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x3010, 0x101, 0x2, 0x5, 0x3f, 0x1f4, 0x3f}) pause() ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) 22:47:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:08 executing program 2: sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe426}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x35067bd0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8018}, 0x20044891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 447.461991][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.476072][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 22:47:08 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420c, r0, 0xffffffffff600041, 0x0) 22:47:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5451, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 447.514630][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.534522][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.549684][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 22:47:08 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r1, 0x1, 0x1}, 0x40) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pause() ptrace(0x10, r0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) ptrace$getsig(0x420d, r3, 0x8001, 0x0) [ 447.564514][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.575693][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.585863][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.596636][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 22:47:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000200)=""/144) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000180)={0x0, 0x2000, 0x5, 0x6, 0x8}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000100)) r9 = dup2(r5, r6) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) signalfd(r0, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x14000}) write$UHID_SET_REPORT_REPLY(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000020000000301e20037f20be374f54225b0583aad1a70470143a7b865e5c80f3c0ecc60896bddff09265343197ed969002524bf79ec406853905c74a2b47ac39e343718f172ba5b3d50f0c51957aef20835549f8c135c45bc8f14577ebbdb57c2fea7392b5b4cb333095e93acaf38bcc4c58b15d995ed3d5d0e4286cb2256b348f0462d57e3795386e22a15f6f925278491667ca126cf2a5c78c99ea7979588eab12d3696f549515788cd9c9c7673034c3b4a4371cb00d56e4a50c9416f2fd2741dfd78ef894e7513ac9afb11e0e7214404af49dba3fb9f6f905d69d4e1093feff0c30000000000000000"], 0xee) [ 447.633106][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.669021][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.712607][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.731173][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.770891][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.789955][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 22:47:08 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420e, r0, 0xffffffffff600041, 0x0) [ 447.819112][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.831682][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.852657][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.861126][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.876059][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.886190][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.894659][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 22:47:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5452, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 447.935273][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.973743][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8510 returned -22 [ 447.988950][T27978] binder: 27974:27978 ioctl 4020ae46 7f19464f8530 returned -22 22:47:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce190486962", 0xe2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = accept$inet(r7, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) write$binfmt_script(r8, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/binder#\x00'}], 0xa, "bb1dc5aa3a1f3fe4881dfd81c62078bdece645925f980b125f142c688b1d81ad9ef84f65166c5fca1abfeffb74b850786066915238b2f9154b018bc6d76a4e7b7aa285bf8014ae22a3cfbcf0c8da75844c856f9c5d3ce2cd4641aa32171b6744a0bc3ea3790e8278e2057d45d55d86d215e4cae1c3011c86abe2d20802492a5c2a22fbe9f35d221f47b70d42e29a7151ef2f777fee807c9240f4bf01d1c47774b4c273c29afa415b35249cb706ba2b46f27ef67381658a78eb60d821209942536c914dce2876ddda772f0eeef01f26"}, 0xf3) 22:47:11 executing program 5: clone(0xc0008800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) sched_setscheduler(r5, 0x1, 0x0) ptrace$getsig(0x420d, r1, 0x20000080, 0x0) 22:47:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:11 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0x7, 0x0) 22:47:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5460, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x6364, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 450.575973][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.606839][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 22:47:11 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffff00000007, 0x0) [ 450.624912][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.637244][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.646491][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 22:47:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffa) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) 22:47:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}}, 0x2) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() pause() ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) [ 450.717867][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.755701][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.819140][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.881537][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.915587][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 22:47:11 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 450.931924][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 450.962465][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 450.970650][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 22:47:11 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x40, 0x140c, 0x10, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) keyctl$setperm(0x5, r3, 0x800) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0x8001, 0x30383653, 0x2, @stepwise={0xfff, 0x80000001, 0x4, 0x80000000, 0x0, 0x4}}) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 450.986384][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.020013][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.049585][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.071958][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.083855][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.121788][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.138450][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.155571][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.166067][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.176516][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.185089][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.195069][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.224015][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.250668][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.269766][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.290303][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.299478][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.323256][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.336435][T28629] binder: 28621:28629 ioctl 4020ae46 7f19464f8510 returned -22 [ 451.347203][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.380300][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.432388][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.440576][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.450122][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.458546][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.467932][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.476558][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.485158][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.493719][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.502684][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.518534][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.527047][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b510 returned -22 [ 451.535852][T28946] binder: 28942:28946 ioctl 4020ae46 7fd3c032b530 returned -22 [ 451.544479][T28946] Unknown ioctl -2126991741 22:47:14 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:14 executing program 5: syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x1, 0x402) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/149) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:47:14 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xae01, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce190486962", 0xe2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000640)="230c00000029a761cda2f6fe2f9ba3cf877e499d267b3435b1a3fd4633b4fc4d5c5a739fa7fecd4bf9040305c0af2ee88421aa40e9664e5245d72d2f88f0e06c7c241ca3a0e31adc76242eabb604e626e44697775c4e6d6251fd9a93fd2f257aeae7b52a445b95ee5ce7cf13244e34", 0x6f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r6, r8}, &(0x7f0000000440)=""/243, 0x8d, &(0x7f0000000240)={&(0x7f0000000100)={'streebog256-generic\x00'}}) keyctl$set_timeout(0xf, r7, 0x1) [ 453.627184][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.650814][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.660807][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 22:47:14 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xae41, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:14 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000000)=""/91) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 453.685819][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.687674][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.698854][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.722589][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 22:47:14 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x82000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r1, 0x1, 0x1}, 0x40) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 453.726002][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.746721][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.769762][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.776976][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.804521][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.822903][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.841710][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.849561][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.864984][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.876800][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.890251][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.892978][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.900145][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.925984][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.971834][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 453.982150][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 453.983333][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 22:47:14 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xae80, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 454.021819][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.023915][T29381] binder: 29372:29381 ioctl 4020ae46 7fd3c032b510 returned -22 [ 454.054333][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 22:47:15 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x8, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:15 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) ptrace(0x8, r3) r4 = socket(0x4, 0x4, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvfrom$ax25(r7, &(0x7f00000000c0)=""/4096, 0x1000, 0x40000000, &(0x7f00000010c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000080)) getsockname$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 454.081679][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.138096][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.228210][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.285668][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 22:47:15 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace$getsig(0x420d, r1, 0x8, 0x0) [ 454.330738][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 22:47:15 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x45a54) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000001c0)=""/4096) [ 454.373342][T29374] binder: 29370:29374 ioctl 4020ae46 7f19464f8510 returned -22 22:47:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 454.689503][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.715736][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.739605][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.748154][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.756827][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.765447][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.776787][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.785609][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.793880][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.802559][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.817565][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.826042][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.838178][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.846589][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.855223][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.863451][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.878133][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.888529][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.902145][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.910605][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.923422][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.938269][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.946420][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.954353][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8510 returned -22 [ 454.962148][T30273] binder: 30184:30273 ioctl 4020ae46 7f19464f8530 returned -22 22:47:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce190486962", 0xe2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xae9a, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:17 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10080, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000040)) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:47:17 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x2, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x2, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r4}]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x8, &(0x7f0000000040)=""/171) pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r5, r6) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x100004, 0x4) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'vcan0\x00', r9}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f0000000000)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e28}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4851}, 0x44) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 456.687089][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.698128][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.708248][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.719665][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.729617][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 22:47:17 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x3, [0x6, 0x2, 0x0]}) [ 456.742116][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.755493][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.766992][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 22:47:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x400454ca, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 456.797094][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.818332][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.828452][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 22:47:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000000)=0x80, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x800) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r3, r8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000002c0)={@mcast1, 0xffffffe1, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x20) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0xe, 0x80800) dup(r11) [ 456.843483][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 22:47:17 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x80800) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x36, 0x119, 0x0, 0x0, {0x1}, [@typed={0x4}]}, 0x18}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 456.871571][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.879358][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.941777][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 456.949822][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 22:47:18 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x40049409, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 457.029100][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 457.042705][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 457.059200][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 457.067668][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 22:47:18 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = getpid() pause() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xe5) ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='x0\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf250f00000024000380050008000400000006000400ff0f0000080001000000000008000100000000000800040004030000140001800800090079000000070006006c6300001400018008000b007369700008000500040000000800050000000000080005003f000000"], 0x78}, 0x1, 0x0, 0x0, 0x404c040}, 0x4) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000640)="230c00000029a761cda2f6fe2f9ba3cf877e499d267b3435b1a3fd4633b4fc4d5c5a739fa7fecd4bf9040305c0af2ee88421aa40e9664e5245d72d2f88f0e06c7c241ca3a0e31adc76242eabb604e626e44697775c4e6d6251fd9a93fd2f257aeae7b52a445b95ee5ce7cf13244e34", 0x6f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7, r6, r8}, &(0x7f0000000440)=""/243, 0x8d, &(0x7f0000000240)={&(0x7f0000000100)={'streebog256-generic\x00'}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000180)='user\x00', &(0x7f00000001c0)=@builtin='builtin_trusted\x00') [ 457.111839][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 457.119632][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 457.148613][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 457.169950][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8510 returned -22 [ 457.219603][T30341] binder: 30333:30341 ioctl 4020ae46 7f19464f8530 returned -22 22:47:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199", 0xe4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:20 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000100)={&(0x7f0000000000)=""/250, 0xfa}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x2, &(0x7f00000000c0)=0x4) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x80000001, 0x6, 0x4, 0x10, 0x1, {0x77359400}, {0x1, 0x8, 0x80, 0x5, 0x20, 0x1f, "00651e85"}, 0x20, 0x4, @userptr=0x3, 0x5d967d72, 0x0, r1}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100000000000) r6 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r6, r7) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x40186366, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:20 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x2, 0x6, 0x3}, 0x0, 0xff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0xbf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000080)=0x6) [ 459.779332][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 459.815442][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 22:47:20 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) getsockopt$sock_timeval(r0, 0x1, 0x56, &(0x7f0000000000), &(0x7f0000000040)=0x10) r2 = getpid() pause() r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x3414c0, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000180)) ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) [ 459.836133][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 459.858019][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 459.868808][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 22:47:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat(r7, &(0x7f0000000000)='./file0\x00', 0x201, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b803018ec0c421d5d065000f20d9c46259acd966ba6100b0e7ee400f0178c364f3470fc732c74424009d000000c744240200000000ff2c24c44271b76100660fea7101", 0x44}], 0x1, 0x46, &(0x7f0000000180)=[@cr0={0x0, 0x4000a}], 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r12 = dup2(r5, r11) syz_kvm_setup_cpu$x86(r12, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:20 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/155, 0x9b}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x4020940d, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 459.884188][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 459.900240][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 459.908742][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 459.931505][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 459.991548][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.007425][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.051090][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.105741][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.114587][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 22:47:21 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x4020ae46, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 460.157227][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.184103][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 22:47:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x5c8, 0x4, 0x4, 0x8, 0x0, {0x0, 0x2710}, {0x4, 0xc, 0x1, 0x9, 0xc, 0x6, "2fe0cbc1"}, 0x2, 0x2, @offset=0x2, 0x7b, 0x0, r0}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000140)={0x401, [0x5188, 0x36, 0x6, 0x80, 0x1, 0x7fff, 0x5, 0x4, 0x3, 0x3, 0x4, 0x7, 0x3, 0x1, 0x4, 0x2961, 0x8, 0x541f, 0x895, 0x0, 0x1, 0xfcb2, 0x0, 0x100, 0x0, 0xf800, 0x1000, 0x9, 0x400, 0x8bf, 0x8, 0x1, 0x1000, 0x3, 0x2, 0x4, 0x101, 0x9, 0x5, 0x6, 0x6, 0x401, 0xc23d, 0x800, 0x0, 0x1, 0xfff], 0x4}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20a82, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000240)={0x6, 0x0, 0x1f, 0x1, &(0x7f0000000200)=[{0x9, 0x2, 0xfffe, 0xf29}]}) r7 = dup2(r3, r5) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 460.216487][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.251865][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.283684][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.312092][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.344997][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.421805][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.437184][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.458422][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8510 returned -22 [ 460.468147][T31089] binder: 31081:31089 ioctl 4020ae46 7f19464f8530 returned -22 22:47:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199", 0xe4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:23 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x50000, 0x0, [0x7, 0x7, 0xfffffffffffffffd, 0x2, 0x3, 0x1, 0x1, 0x6]}) r2 = getpid() pause() r3 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x18c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) 22:47:23 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) io_setup(0x2, &(0x7f0000000140)=0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x182, 0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000240)={0x2, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000200)=0xc) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x4090ae82, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0xdb9ab1f910d721e0, 0x70bd2c, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48404}, 0x4) r6 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r6, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 462.878683][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 22:47:23 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() pause() ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 22:47:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x800442d3, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 462.929847][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 462.941787][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 22:47:23 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) sched_getparam(r0, &(0x7f0000000080)) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'geneve1\x00', {}, 0x9}) 22:47:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r5, 0x1, 0x1}, 0x40) signalfd4(r5, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) r6 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f00000000c0)=""/170) [ 462.973778][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 462.998896][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.009193][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.074314][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.112757][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.159402][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.197234][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.205430][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.222997][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.230875][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 22:47:24 executing program 3: clone(0x2001c2082fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0x3, 0x0) [ 463.283603][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.302749][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 22:47:24 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x2, 0x4) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 463.311243][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.361674][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.395986][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.422575][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.449379][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.485041][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.520813][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.545245][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.557233][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8510 returned -22 [ 463.575451][T31833] binder: 31830:31833 ioctl 4020ae46 7f19464f8530 returned -22 22:47:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199", 0xe4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:26 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x80086301, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000000), 0x8, r4}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r2, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000140)={0x4, 0x5, 0x4, 0x1000, 0x5, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x99, 0x7, 0xfd, "16d51254"}, 0x1f, 0x3, @planes=&(0x7f0000000040)={0x7fffffff, 0x7, @mem_offset, 0x4f5b}, 0x9, 0x0, r6}) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:47:26 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000000)=0x1) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@empty, @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff, 0x5, 0x4, 0x100, 0xf565, 0x40000000, r5}) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x2) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:26 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x4) 22:47:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r3, r5) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 465.969306][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.007615][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 22:47:26 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xc0045005, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:27 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:27 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace$pokeuser(0x6, r1, 0xffff, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, 0x0, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000200)=""/81) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000001c0)=0xfffffffa, 0x4) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) ptrace$setregs(0xf, r0, 0x4, &(0x7f00000000c0)="17bfa14a291a3df700dbf8408b4ff78378f5371860444274a5eca17fc44a6683e6a4dab4dbba6330420a9d4ca25b8a133a6c0905772e282320da60a725fcd30e1d37125eba316e5432d0a622358301513702a6ced88154de70854997c9eff251fbf3c730e850dd3ad63ebae022e90268688eec0bfd0f4f8b603d491ea4ed16d4cf57324e08306cab4b9cc1016bce7bd427096c557c6d85f65d139fdbeeb2ffead1f3d3b1210e6da4cdfe731cfc13feef3658cbc814dce303cb14281c86cbaca1afd6924a867a484b0e935fb6c9b056") [ 466.033587][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.065332][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 22:47:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8a400) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r6, 0x1, 0x1}, 0x40) fstat(r6, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x7, &(0x7f0000001680)=[{&(0x7f0000000180)="f231e3946928", 0x6, 0x80000001}, {&(0x7f0000000200)="10cb0dab905b5a344ace501775b7cf4ddaac8dc815694b73e0670a26d026233712806edb62c8a0a324c5a9ea59ddc02f42d8fd206cc41b98e14386621eea5174d19a5eacd0e520e74edcdaa0f31bcebe7d32a8c9eecf6a521fb3f72749a17b3ee0733d3715131f47303fad97edbc90ea989eadfba4674541d616ef4497475e709ee1a02e33dc6baeef7b5788f96f491f7ee5c7dc4ed2f7b87da91bdc812ebddbf8083ba8d3d4bea4ddff5e49ec504851a366220e3d5a9ea20c1c2b9763a7e7b545b61b906885dc10f8a71fc23447bc817683d5176d47a1c790d5a2741165f750a6095a1c19abf987bf4a4ddfbf3e89d97f9d2e9b1b", 0xf5, 0x1ff}, {&(0x7f0000000300)="f969a7d4a37d3b1c7a94fd2bb0d729a1df7672035793e7583c907661c9cd76b925c31beb20ff0c7954a32e37fd7488b29e3920939bd82fe8b39e722bc5db4ccac4304098", 0x44, 0x1}, {&(0x7f0000000380)="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", 0xfe, 0x100000000}, {&(0x7f0000000480)="23717c0511ec9e16896429d5238b32d41ba9ac495fe69456f491145ba61c32a6cf12344636bf4c8dc9a55dfa45f76e2a9f2155dcb37e44f4c0b2d535058689a12bf08565faf7bd3d841b5d951f3446e1906a3fe538b714e62962937201e38d032d7d9e991fdc12be2e2bd43c24c101501203dee1e1bc73816c0292d0c2721bfa79d73571541cef2633789c14c9259ea4351d09ba21d040066802ca24e98d9a6f9aa0468b90f1f650911add8bb49d2729a2f10c32127a465fa1e82778f794c70eda7c83e65bf988a4d7ba4f", 0xcb, 0x7}, {&(0x7f0000000580)="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", 0x1000, 0x1}, {&(0x7f0000001580)="99ec99f0d8a971ee8354d6945c849b6d9f80965375a960fbe265aedf13dc02b6e6b209b3f4ef6f4872cfc0146a2c1d42bae7e20a1b10518be8152ee4a66764108eec56ba911c3a79b98e81a1056694bd52c92dbc357cabdef9fd06fd84a029265645cb5c4af91aae53007ed04d07becf7bf1ecc738152d6c1300d7d379a9cba4b15de66b6187c94fbe83f44ca6a7fdfcafd59b929776460a95bdc583b17119e3335fd24c4ecfa1ebe6a1bbf1a2e9993e7d46c45f88ecb3122de0d9f5da8ac8421388e571156f14e75e0f0a84ce51181977", 0xd1}], 0x80b010, &(0x7f00000017c0)={[{@uid={'uid', 0x3d, r7}}], [{@pcr={'pcr', 0x3d, 0x2a}}, {@obj_role={'obj_role', 0x3d, '/dev/binder#\x00'}}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r9 = dup2(r5, r8) syz_kvm_setup_cpu$x86(r9, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 466.095346][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.133166][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.173175][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.247526][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.303431][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.311276][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.321254][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 22:47:27 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) ptrace$setsig(0x4203, r3, 0xea, &(0x7f0000000000)={0xe, 0x1, 0x4}) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 466.371764][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.404646][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.419567][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 22:47:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xc0045878, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 466.450597][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.465785][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.565210][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.648443][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 [ 466.678597][T32677] binder: 32673:32677 ioctl 4020ae46 7f19464f8510 returned -22 22:47:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:29 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xfffffff, 0x3, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909da, 0x8, [], @p_u32=&(0x7f0000000000)=0x5}}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x7) pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) 22:47:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x450a80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000000)={0x8, 0x12, 0x6, 0x8, "28843ea82702143d42fc2b5d526700ab70238938ca27a3e5d2e11f85b4d371ca"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r10 = openat(r9, &(0x7f0000000280)='./file0\x00', 0x101000, 0x113) ioctl$KVM_PPC_GET_PVINFO(r10, 0x4080aea1, &(0x7f00000002c0)=""/94) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000340)={@rand_addr=0x80000001, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x100}, 0xc) close(r7) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r11, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_pgetevents(0x0, 0x9, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x6]}, 0x8}) 22:47:29 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r5, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xad}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x14) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r3, r5) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:29 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xc0045878, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 469.008074][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.018520][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.027625][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.037050][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.046470][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.061958][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.085727][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.099436][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 22:47:30 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xc0189436, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 469.112878][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.126925][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.137410][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.150176][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.161185][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 22:47:30 executing program 3: socket(0x11, 0x80000, 0x42) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0x2000}) pause() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000040)="27280fcc59c14e0fa3bfdd05aa06338b4b088d8e3d0d87117baf54ac48962912d6b19b96538d594d9accd65b0819c686e76f41b3a2919801", 0x38}) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$nfc_raw(r1, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x6}, 0x10) ptrace$getsig(0x420d, r0, 0x5, 0x0) [ 469.188027][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.198568][ T965] binder: 955:965 ioctl 4020ae46 7fd3c032b510 returned -22 [ 469.217357][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.227424][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 22:47:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0) write$FUSE_OPEN(r2, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0x4}}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r4, r5) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff17) clone(0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = getpid() pause() ptrace(0x10, r6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/130) ptrace$getsig(0x420d, r6, 0xffffffffff600043, 0x0) [ 469.309886][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.347143][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.391905][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.421683][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.478259][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.486362][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.494284][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.503012][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.510740][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 22:47:30 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000040)) 22:47:30 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0xc020660b, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 469.528663][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.556297][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.565481][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.575242][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.595656][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.612669][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.634167][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7510 returned -22 [ 469.681195][ T971] binder: 958:971 ioctl 4020ae46 7f19464d7530 returned -22 22:47:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:32 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x4208, r0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x80, 0x3e, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r5, r8, 0x1ff}) getegid() ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:47:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r3, r5) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:32 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:32 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000200)=""/16, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000800)={'vxcan0\x00', r4}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000840)={@mcast1, r5}, 0x14) r6 = dup(r2) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000010000050c000368686105683a697000"/32], 0x20}, 0x1, 0x0, 0x0, 0x44891}, 0x88044) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000000)) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x10000) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000100)={0x80000001, 0x2}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xc6f, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 472.134405][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.170698][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 22:47:33 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2}) 22:47:33 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1, 0xc0a00) 22:47:33 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x400, @remote, 0x2}], 0x4c) r2 = getpid() pause() ptrace(0x10, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x3) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000700)=0x12e3) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) 22:47:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r3, r4) r5 = dup3(0xffffffffffffffff, r2, 0x80000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x200000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) [ 472.205159][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.254802][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.296852][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.356840][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.392777][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.420426][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.429151][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.437655][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.446503][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.456148][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 22:47:33 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="309abf3c026db5ec28db8325800878493db77aa24c626800792f1cec350de92d9bffdba800baff96ba8f5510e046602407dfa0cf87242ca65a69ef5df6", 0x3d) 22:47:33 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xfffffffffffffffe, 0x0) [ 472.479896][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.491813][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.508529][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.567509][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.628562][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.700837][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.771688][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.785778][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.826007][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 472.852473][ T1733] binder: 1728:1733 ioctl 4020ae46 7f19464f8510 returned -22 [ 473.153075][ T0] NOHZ: local_softirq_pending 08 22:47:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:36 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x3}) 22:47:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r2, 0x1, 0x1}, 0x40) readv(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = dup2(0xffffffffffffffff, r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:36 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r1, 0x1, 0x1}, 0x40) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x0, 0x7, 0x0, [], [{0x8, 0x1, 0xfffffffffffffff8, 0x70, 0x4, 0x9}, {0x8, 0x0, 0xfffffffffffffffc, 0xfff, 0x1, 0x10000}], [[], [], [], [], [], [], []]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000640)="230c00000029a761cda2f6fe2f9ba3cf877e499d267b3435b1a3fd4633b4fc4d5c5a739fa7fecd4bf9040305c0af2ee88421aa40e9664e5245d72d2f88f0e06c7c241ca3a0e31adc76242eabb604e626e44697775c4e6d6251fd9a93fd2f257aeae7b52a445b95ee5ce7cf13244e34", 0x6f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r4, r6}, &(0x7f0000000440)=""/243, 0x8d, &(0x7f0000000240)={&(0x7f0000000100)={'streebog256-generic\x00'}}) keyctl$describe(0x6, r4, &(0x7f0000000040), 0x0) 22:47:36 executing program 3: sysfs$1(0x1, &(0x7f0000000000)='proc\x00') clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:36 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x4}) [ 475.242039][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.265139][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 22:47:36 executing program 5: clone(0x20020284a7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) statx(r1, &(0x7f0000000040)='./file0\x00', 0x800, 0x304, &(0x7f0000000080)) r2 = getpid() pause() syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x1) ptrace(0x10, 0x0) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) [ 475.311861][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.332987][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.343494][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 22:47:36 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @broadcast}, 0x0, 0x3, 0x2, 0x3}}, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 475.381762][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.406265][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.436974][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 22:47:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000240)={0x2, 0x9, 0x100, 0x6}, 0x10) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400004, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000200)) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000180)={0x1, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r9) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000080)={'veth0_virt_wifi\x00', {0x2, 0x4e24, @empty}}) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 475.481697][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.551980][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.584988][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 22:47:36 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x5}) [ 475.610274][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.628686][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.645523][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.656969][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.664953][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.683562][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 22:47:36 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r2, 0x2) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x400) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x1ff, 0xa, 0x4, 0x2000000, 0x4, {0x0, 0x7530}, {0x4, 0x1, 0x4, 0xa3, 0xde, 0x1, "25b0709f"}, 0x6, 0x1, @offset=0x172000, 0x3f, 0x0, r3}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000240)}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r5, 0x1, 0x1}, 0x40) fsetxattr$security_ima(r5, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "98b3cbf1b97a57f71a328c18009b10307fb413a9"}, 0x15, 0x2) [ 475.754750][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.770941][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.803690][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.831741][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.861014][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.881686][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.896929][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8510 returned -22 [ 475.906265][ T2605] binder: 2602:2605 ioctl 4020ae46 7f19464f8530 returned -22 22:47:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:39 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000640)="230c00000029a761cda2f6fe2f9ba3cf877e499d267b3435b1a3fd4633b4fc4d5c5a739fa7fecd4bf9040305c0af2ee88421aa40e9664e5245d72d2f88f0e06c7c241ca3a0e31adc76242eabb604e626e44697775c4e6d6251fd9a93fd2f257aeae7b52a445b95ee5ce7cf13244e34", 0x6f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r3}, &(0x7f0000000440)=""/243, 0x8d, &(0x7f0000000240)={&(0x7f0000000100)={'streebog256-generic\x00'}}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, &(0x7f00000001c0)=0x10, 0x80000) keyctl$instantiate(0xc, r2, &(0x7f0000000400)=ANY=[@ANYBLOB='new ecryptfs trusted:vmnet0vboxnet1]&em1& 0000000000\b\x00\x00\x00000003\x00'], 0x3f, 0xfffffffffffffff8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x8, @rand_addr="de1ea6584867bd2c970efdd8528c573b", 0xfff, 0x2}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xc, r5, 0x1, 0x2, 0x6, @local}, 0x14) pause() ptrace(0x4208, r0) ptrace$getsig(0x420d, 0xffffffffffffffff, 0xffffffffff600046, 0x0) 22:47:39 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x6}) 22:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r3, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff80000000, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x3ff) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fd8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 22:47:39 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x8, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000080)=[0x5, 0xbae, 0x4fc, 0xb5c], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) r4 = add_key$user(&(0x7f00000015c0)='user\x00', &(0x7f0000001600)={'syz', 0x3}, &(0x7f0000001640)="bc95d6713c390a134436142a9a73f54e5740214305b3074acd3d5d345b57cbc02dc25b28ed3507ccfed11c2220daf1601f3e3ba997e5dccad0995371dfd2e8b1fd54330d96684610b7aea349790846df91fc808b2c148f913b1d43c15fe7faa1ae82bf81b6cbb249333463de564ac88735edab9e68768b3e7529078e684bb0f94794f37ab00bc9a86aeb86118205ad8a4407bde50c586da3483415b0b5049cfd6df20ce1c51e061dec1d16cca635f235e4e955", 0xb3, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001700)={r4, 0x29}, &(0x7f0000001740)={'enc=', 'oaep', ' hash=', {'blake2s-224\x00'}}, &(0x7f00000017c0)="864b85eda28f7e58c49ba2c46b77005c8064830189c34f821baba5406f6dcdcee869508e0b0046494b", &(0x7f0000001800)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a29004cb535c61ef1942016b813b251fdf7ef7bc1c904751f04a70210d1958b056f2c40fcf72d2a509b80aba610c95cf3e14aea1bd15b0e3aa0964b5479b1b8bcd2ea2eb75a3c7c61feb5fb6552afe9bbebd54f16c0afdf9eabdee781ecfb0357a42a66a6b9284f91634c2b16a106cf2b79598638c8c0a0fe2d8816e8186271f1ea62bef03df987e055cf393054d65ef187cfeaf6b6"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r5, 0x1, 0x1}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r7, 0x40184150, &(0x7f0000001100)={0x0, &(0x7f0000000100)="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", 0x1000}) 22:47:39 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x7}) [ 478.356172][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.403175][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 22:47:39 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, 0x6, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40010) ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000080)={0x3, r5, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0xffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(r3, &(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 478.444425][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 22:47:39 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) 22:47:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x288802) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) [ 478.489590][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.524909][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.553881][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.572954][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.584827][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.593673][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.604027][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.612003][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.641774][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 22:47:39 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x8}) [ 478.654190][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.685473][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 22:47:39 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r1, 0x1, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r4, 0x1, 0x1}, 0x40) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 478.712437][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.746575][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.804646][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.822414][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.830280][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.858978][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.891001][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.952787][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.973204][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 478.990253][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8510 returned -22 [ 479.038668][ T3402] binder: 3391:3402 ioctl 4020ae46 7f19464f8530 returned -22 22:47:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:42 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$usbfs(r5, &(0x7f0000000140)=""/6, 0x6) sched_setscheduler(r3, 0x5, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/91) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x9, 0xc0, 0x9, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x2240, 0x5, 0x3, 0x1, 0x9, 0x3ff, 0x7f}, r3, 0xb, r7, 0x1) 22:47:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @rand_addr=0x800}, {0x2, 0x4e23, @local}, 0x80, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000000c0)='veth1_to_bond\x00', 0x8000, 0x1, 0x6}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x356, @loopback, 0xab}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xe0}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x6}, @in={0x2, 0x4e23, @loopback}], 0x98) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x81}) r7 = dup2(r5, r6) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x1c, 0x0, 0x0) 22:47:42 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x300}) 22:47:42 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) pause() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000000), 0x4) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r3, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:42 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r4, 0x1, 0x1}, 0x40) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4, r1], 0x2) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 481.436350][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.455436][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.475547][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.499484][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.513710][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.561856][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 22:47:42 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x500}) 22:47:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x40) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r7, 0x1, 0x1}, 0x40) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) utimensat(r8, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0x7530}}, 0x100) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PPPIOCCONNECT(r10, 0x4004743a, &(0x7f0000000200)=0x1) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000100)) [ 481.607891][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.637763][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.650049][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.664660][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.676066][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.687184][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 22:47:42 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x1, 0x328, 0x0, 0x4}, 0x10000, 0x100, 0x3}) r1 = getpid() pause() ptrace(0x10, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x40800) r5 = dup(r2) r6 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x1, 0xa00) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x2400200) ptrace$getsig(0x420d, r1, 0xffffffffff600041, 0x0) [ 481.762493][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.770083][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.851687][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.862335][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.882412][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.913959][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 481.952567][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 22:47:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:42 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x600}) [ 481.977146][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 482.004005][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 482.043741][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 482.066295][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 482.121666][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8510 returned -22 [ 482.129421][ T4219] binder: 4211:4219 ioctl 4020ae46 7f19464f8530 returned -22 [ 482.242739][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.269772][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.296748][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.315425][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.325126][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.338423][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.353532][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.386061][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.412075][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.419895][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.461779][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.469930][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.478554][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.487929][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.502384][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.510742][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.521921][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.529696][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.539812][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.548056][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.558484][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.569818][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.579517][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.590950][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b510 returned -22 [ 482.600679][ T4747] binder: 4742:4747 ioctl 4020ae46 7fd3c032b530 returned -22 22:47:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:45 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREAD(r2, &(0x7f00000001c0)={0x64, 0x75, 0x2, {0x59, "852eaaa177204af6191ee47eaf4acbdf849100fc33bfeb180df1faa5a58b7447a99efe91da67aa2bbb3a73a977a58076f2629511c7932fe479636d689b48a98c02b729a656fb87ad464458162546cf09cb9a7a2c68a5887ee6"}}, 0x64) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:45 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x700}) 22:47:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000020102000000000000000002000000280002800c000280050001002f0000000c00028005000100210000000c00028005000100820000000a00060051c5342e39333100000004000a80540002802c000180140003003aff9af9570a3d471dfb49782f3bfd7c14000400fe8000000000000000000000070000000000000005000100110000000c000280050001002f0000000c00028000080008400000000108000840010500000003bc0003802c00018014000300f06c317eb4eb1cfea89465f5acd9219f1400bfa5ae3a1400018008000100ac14143608000200ac14141e2c00018014000300ff0100000000000000000000003f000000000400fe8800000000000000000000000000010c00026b85000100880000000c000280050001003a0000001400018008000100ac14de3bcc26b6ac1214aa08000200ac1414bb06000340000400000c00028005000100210000000c00028005002f7f063430121361298334c66535c9008e25e842eaabbaaea4f5f14222a56a6f27d7443daf4189e123c5081faf4c38e986a304a8599d68b20cdda334f63a3806ebdc73a789a5c395d6463f9104d674adafe9091647cabd0172d771dd21272694388c91d0850558cedd47e9eb09396481e20d0eb14803b63c24d9c4b91d46725d8c250f0a04fca0842ced76b335ce8db3b886b1a4da7e8e42e9ad37741d588b06c6865f13d29ba4b94e5e72bfb30af3a24151f35f2bbe867ba132d2c91c03b6f8bfdd9000b2bf1738dc34d43e104d2e67ebcd1f5a043ae0b8aca998043bcfda597a85caa7d929a822b48c955a5991aa1f5e24cd869a776e793ab79523e251cd8a4ccf429c726e605f0f07705ae62eea39db063005842284afd751588689116c0378e984b39cc4dd578470833ebd83de1a85ee6e024a858f47871494ae8cf0c7d11268cc384b17ce20e7d68aa466ac2309821586be2d2675a0504b4a40ae19dbe148376814f281af97921a9c7cc1fa8f62a3804e982b33525ea051773fdb95aeac744790c3364cff0e7c5df3c5040373dec5f70ade7648707e071138655cd277f693e1340a3299b6bdae34de3f9625dfa7d45c8d5d7e9aefc2b3cee21259e60fca00000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8014) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r5, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000180)={0x25, 0x7, 0xa, 0xe, 0x5, 0x0, 0x4, 0x14}) close(r8) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r11, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:45 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv4_newaddr={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_ADDRESS={0x4, 0x3, @empty}]}, 0x28}, 0x1, 0xf0ffffff}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14010894}, 0x800) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xf7:\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'ppp1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000010) 22:47:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) r6 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x20000) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f00000000c0)=0x2, 0x4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:45 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:45 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x3f00}) 22:47:45 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0x3, 0xff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0x15f, 0x20b9, 0x24, {0xfffffff8, 0xf3}, 0x10000, 0x8}) r5 = dup(r1) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000001c0)="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") ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 484.712164][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 484.720298][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 484.796240][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 484.819511][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 22:47:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(0xffffffffffffffff, r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 484.847772][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 484.900641][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 484.925832][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 484.935802][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 484.975566][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.012093][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.029768][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.038898][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.053017][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.061165][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.085768][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.094395][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.105588][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.114171][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.122308][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.130327][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.139255][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.147589][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.172652][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.192886][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b510 returned -22 [ 485.200820][ T5072] binder: 4930:5072 ioctl 4020ae46 7fd3c032b530 returned -22 [ 485.314343][ T0] NOHZ: local_softirq_pending 08 22:47:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:48 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x401, 0x808091, 0x7ff, 0x2, 0x100, 0xffffffff}}, 0x50) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:47:48 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0xff00}) 22:47:48 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x1, 0x7f, 0x4, 0x4, 0x0, 0x6, 0x104b0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7f}, 0x80002, 0x80000000, 0x80000001, 0x1, 0xdf, 0x17}, r0, 0xf, r2, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x10008}, &(0x7f0000000140)=0x8) pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) ptrace(0x4207, r4) dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r1, r5) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x20040080) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) ioctl$TCGETS2(r8, 0x802c542a, &(0x7f0000000000)) [ 487.586495][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 487.618086][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 22:47:48 executing program 5: r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x12, 0x0, "57b8cf0404f94cceb6ed9b1842628b52132cf0fc6380310f796f295c03d2149a4116202faf38a2bec977ce949e1c0315916d9c3211c92c2e9d3da04a30cb8fdc", "d7257dd220bb28445725cae5c09bc37e8c28dd66b30411a5c8a68b015a82591eeadb9eb6f301c61b3a8dcfdc91628901336ccf6f9abfe178fe272e73cc859170", "b24952dbc3e666de315aff3aa962b805575d72e63caff454e6decf0c7b748a08", [0x5, 0x6]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x411b8015, 'syz1\x00', @bcast, 0x8, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() pause() ptrace(0x10, r3) ptrace$getsig(0x420d, r3, 0xffffffffff600043, 0x0) 22:47:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r6, 0x8004552d, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000000c0)={{0x2, 0x0, 0x579c, 0x1, 0xfffffff9}, 0xffffffff80000000, 0x7fff}) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x18a6244b, 0x4000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f0000000140)={0x80, 0x0, 0x10000, 0x7}) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f00000002c0)={0x5, 0x0, &(0x7f00000001c0)="01334063e76e838c6bf003eb75587cf4a1343df9eeeb53e512d3652391b9e128c867867014af7fbe2d45acbb418b4a80870dd77d21bd80c70a100a6e1ff85457136f20495f5dd73907f166a5a645f22cc6835e62397ec8d414e615f1779d422feeb838c562f452a2b7eae9544e35153a079fe27635a3b417cd246b5bd76e173aee6d3a8be9a063c13db6900e0934703babf8af7cc40628b56748b161846a08e7ef719afccb01f737177cc74764561f3718bd0fa6c4f22e0ed8002db337f4bf7a57aab5bcea85468a76d67c89ecee04eedd4489e8f40918b953a4f680b978503e", {0x1, 0x800, 0x49323159, 0x9, 0x7f, 0x5, 0xc, 0x957}}) ioctl$DRM_IOCTL_SG_ALLOC(r7, 0xc0106438, &(0x7f0000000180)={0x0, r10}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 487.646083][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 487.691478][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 487.705977][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 22:47:48 executing program 3: clone(0x60040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x4, 0x1, 0x3}, &(0x7f00000001c0)=[{}, {}, {}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, 0x0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01010000704fa66a42e505710859cb2ef095e58b021b83737924ced83f996328b4fcf6383fa7c689ee4c410288d603abe197db9918b3e49f700c676b489123ec568fdf0127775ac39edaae321a278bbf30b899a0e3be678ee61e82d0b12e1a8d41f431afd6b3e97926fa29f4bef3ba105acec2b80872", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf3e0300000005002a000100000005002a0001000000d7698954ca1e2658085f080039000600000008003a00e20f0000080034000500"], 0x44}, 0x1, 0x0, 0x0, 0x60}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2a000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000100)=0x4) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 487.740951][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 22:47:48 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r2, 0x1, 0x1}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x5, 0x4, 0x3ff, 0x0, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={r6}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r6, 0x6, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000200)="136689e5a47326a86be3fe9d50644355d2fb52103f5bfed9e31f17a3d87b89558329de207b948cda1e843e88740bd97d2f0c2c4d8de0ac0f82923f09aa4f8822bd5cef3c728ec3158fb07d7d8ca05ac8dcbd9d8f0b77f704c887bc1ed65c104685c1ff4667e8a077ee1b9b35d23520d2658fce4bd93a653901a2291dc3e50e22249f7d96ce", &(0x7f00000002c0)="70dcf33458f62bc2d6c57baa4dcbb47169aa8c042467c562acca7af4cafee07352d5a2b59e187c5f9053ea7cf1202f4b9bbff4d0a74aa8694468b2723fe498fc8dabf07a0c00cb3a6334bddf04aa6706000686e9224667ec21db6754f5139c1c07a6185f69406f4fdec59b2a1e4522d62b1c8a6f6d04f495837d76ec82f24b5bcc7c3e195bff24d9669adef083a02140bc174b18c28a60200e4efb85988687fc630a5a3f7566aa98c6326c368047e93d44ba1254233ce7e4267242decc5d3441287fb70d24988139d0dc6bb04b6e6172d0e16de0a646352e3a2a181cd90cb1fdf8aaab3438c73963ac580d387eb03a76ccb7"}, 0x20) write$P9_RREADDIR(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 487.845010][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 487.890510][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 487.900845][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 22:47:48 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r1, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x5, 0x0, [], "67cb1b6ce5"}}}}}, 0x67) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ftruncate(r3, 0x19dd) write$P9_RREADDIR(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 487.940169][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 487.970116][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 487.979893][ T5744] IPVS: ftp: loaded support on port[0] = 21 [ 487.996638][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 22:47:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x80, 0x54) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) connect$caif(r8, &(0x7f0000000000)=@dbg={0x25, 0x40, 0x4}, 0x18) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 488.072151][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.111862][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.136184][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.149485][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.161989][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.221019][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.264494][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.275356][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.302734][T13267] tipc: TX() has been purged, node left! [ 488.306264][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.350130][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 [ 488.369168][ T5413] binder: 5405:5413 ioctl 4020ae46 7f19464f8510 returned -22 22:47:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:51 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffffffffffffffe) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110700000000d88d14bd08000041b30adc00bf19158376aaa533ce3165dd31cc887e6235e3743093d49213b0d8a0aeaba0fa39426d31af84188b13e236d53d0b205e6f711153dfc876bd619662fb955f29d504a25afd4e731f636bdbe6cf9d0955858fa46f9ad29ab660ce337dba1b587bce1c23f8aad1fc6ce35958a2e1ed0b603bb5debe3587fd03cc22c8876671dfcdab9c970000ef689bb0877eacafa91e628bf1f4f023f9187ac97f2e8165bef3d23cea1c88d201bda9ffc2ef0819fe", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x20008041) pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:47:51 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000000)) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r1, r5) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x8) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = dup2(r2, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) 22:47:51 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\a'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 490.593496][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.605552][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.614143][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.624744][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 22:47:51 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x11, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:47:51 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="34b1b878d7"], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000000c0)={0xc55, 0x7fffffff, 0x0, 'queue1\x00', 0x3ff}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 490.652441][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.669745][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 22:47:51 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000001c0)) r4 = getpid() pause() ptrace(0x10, r4) write$cgroup_pid(r1, &(0x7f0000000000)=r4, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x91) ptrace$getsig(0x420d, r4, 0xffffffffff600041, 0x0) [ 490.713923][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.740847][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 22:47:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 490.843482][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.881674][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.921727][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 490.968959][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 22:47:51 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400203) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 491.009299][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.042129][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 22:47:52 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x2) r3 = userfaultfd(0x0) ioctl(r3, 0xdd, &(0x7f0000000000)="8d214757e9ff04d5eee18af44ea37e3f5fa8c3ed1ba3caa22baa272b3b024715cbb1b78e78ff69d1cf45f141ea04a43a2ce915c9e4c402497fcbd40e986e0e5a37258f0719a12dde3b65") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 491.054326][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.071948][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.128105][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.161139][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.241831][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.261951][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.302965][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.321748][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.354764][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 [ 491.382464][ T6160] binder: 6153:6160 ioctl 4020ae46 7f19464f8510 returned -22 22:47:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:54 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) clone(0x2000000, &(0x7f00000001c0)="dcfa817983512f8d9d41f395dd181e0d8d8ace875b3c9fa6f2e50f3ece3827693c01f1c63cd24dd20dcf7af2d752a0f360271eed2e83709528017bcc7e3739c12fb59fecf5616887d23aa1e7d2d0ce4403e92e1ef789c350b722bff658bab2f2f6d5163939ac5d7f01f288c2d65d6bdabd3b8ae027c22ebff6e7bd61b3ada1dde9fad12ac550fc0c89d3be73b1137974789220a6fa55a6de8cde0e4910aa24a897684523e6e3e6bd47a7207789a1aeef50dcb824cfcfa36e9aab8ac0804e4571a2a18be7a4c1c73beb9e534a4eb04542", &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000002c0)="10bcc0c038847e18038d97c7f4e4387dc3c35c7db4cadacd9f024aceadc2e00aa058b842afb5a6655bfed9d42c1572e7bbdfb39fa8c4f2585ca884b4897cd6ba5a96df6908ee262d090a3619edcf43d6e5f0f3e594017dc4a4e16a2043db5626e240fedfa4f36275aca5c33849154da540bc") 22:47:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r3, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1ff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r8, 0x1, 0x1}, 0x40) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406b8ffffffffffffff22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000600000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de4dfa1e09efcf1956b625ae82342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d0613f0000000000000020abbfeb504a6df9e8bab44908c9bf86a9da878f6198264ebe323dd3f6087b3d4386a2f19c5b38e5899f49b40fc4a34f4bcd8fdee98e2a6bed26b5cb51737699ff6d4938fb243b1d45dc1768b6278a95e4353531f9cda1c04a977a657f1e3d0446b4f256ddfd0ff4b764c2abea5f335f1aafe9fffd3ef6b8682921a780ff463dc0d57244"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r9, 0x1, 0x1}, 0x40) r10 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x80) r11 = fcntl$dupfd(r7, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r11, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x26, 0x0, 0x17) 22:47:54 executing program 5: clone(0x200002049fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600047, 0x0) 22:47:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r1, r5) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:54 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x5c00, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xffffffffffffff8e, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000200)={0x5, "4c6e86"}, 0x6) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 493.628152][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.669996][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.694580][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 22:47:54 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x2, 0x2, 0x1}}, 0x14) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0x7fffffff, 0x0) 22:47:54 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40700, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{@none}, {@fixed}]}) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:47:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f0000000000), 0x10) r7 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 493.737243][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 22:47:54 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_delete(r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{r1, r2+10000000}, {r3, r4+10000000}}, &(0x7f00000000c0)) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() pause() ptrace(0x10, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0xfffffffffffffffc) ptrace$getsig(0x420d, r5, 0xffffffffff600041, 0x0) [ 493.798555][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.810633][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.829110][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.837027][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.949768][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.959230][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 493.968880][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 22:47:54 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000080)=[0xe1, 0x7, 0x10001, 0x5, 0x9, 0x9], 0x12, 0x5, 0x40000006, 0x10001, 0x8, 0x2, 0x201, {0x9, 0x6, 0x400, 0x5, 0x800, 0x7f, 0xe93, 0x0, 0x0, 0x1ff, 0x8, 0x0, 0x60d81f50, 0x3, "8e319e6ccb383348cc56412cad8dc61903db21370753a40b3d99b7dab88b2b33"}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 494.003659][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.051077][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.068900][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.077404][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 22:47:55 executing program 3: clone(0xe2e54800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 494.100142][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.115074][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.151649][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.234492][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.280767][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.322476][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.344488][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 [ 494.385227][ T7017] binder: 7004:7017 ioctl 4020ae46 7f19464d7510 returned -22 22:47:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) r6 = getpid() sched_setscheduler(r6, 0x5, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) syz_open_procfs(r7, &(0x7f0000000040)='net/route\x00') syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:57 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) r1 = getpid() pause() ptrace(0x11, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0xb0, 0x3, 0x1f, 0x81, 0x0, 0x9, 0x802, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0xf}, 0x420, 0x6, 0x8, 0x6, 0x100000001, 0xfffffff9, 0x50e}, r2, 0x2, r4, 0x2) ptrace$getsig(0x420d, r1, 0xffffffffff600043, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) r6 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040)="81", 0x1, 0xfffffffffffffffe) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r6, 0x0, r8) keyctl$chown(0x4, 0x0, 0x0, r8) 22:47:57 executing program 1: uselib(&(0x7f0000000200)='./file0\x00') r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xa, 0x8001, 0x8, 0x1, 0x40, 0x1, 0x0, [0x0, 0xa], 0x0, r2, 0x0, 0x1, 0x10000}, 0x40) r3 = socket$phonet(0x23, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000340)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000001c0)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r7, 0x1, 0x1}, 0x40) fstat(r7, &(0x7f0000000280)) 22:47:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r2, r6) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:57 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 496.676008][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.684300][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.692581][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.700854][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.709972][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.719041][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 22:47:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 496.727504][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.753818][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.771958][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.793485][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 22:47:57 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r1, 0x1, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r2, 0x1, 0x1}, 0x40) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 496.819334][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 496.830894][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 22:47:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000000), 0x4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 496.861630][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 22:47:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ftruncate(r0, 0xffffffeffffffffd) write$P9_RREADDIR(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r6, 0x1, 0x1}, 0x40) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0x56, &(0x7f0000000100)="704e286331c75b5de08b55f6636e95d864ae36c7b9cc2d2a8ab6d187214d300a57a9da0b28c95557643a5b9a5b49d3dcfcfc8dc480c1ae09897348155c44971f6478c55f70e025c7f075080a9e42054f894788eb7705", 0xe9, 0x0, &(0x7f00000001c0)="48864fb6b863ab74ec5c29681578ed444c6a52142a625789bff3251a7175a6f513e286aa93f04b14ec466c83af7be86ddeacc58c524e85c3194f9c253c90a46599f305d9091af46971ec40f94e0f618a3812cbdb99e32c314a17fdb98ae949add134de6c890088094efe21840835f3cb8fdb831521687fe9f552062f574baa02692b9eef88d972f1ab8fa5ac61466daf1310f44de007e28539ff77677bdb1d678ac66513d3e8292150e8653644d8d7b390193589175627660e7e9309187f238fbad5fa33c14e58c852ce0afee2e7a935c118cbed97def1802389ceef6b49d0caa68454b4d0812d0a80"}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 496.923019][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 22:47:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 497.028487][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.111622][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.137276][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.153527][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.197743][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.216919][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.237976][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 22:47:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 497.282834][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.326882][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.366572][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8510 returned -22 22:47:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:47:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7, 0x2}, 0xc) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x5, 0xb, 0x4, 0x8, 0x3, {r2, r3/1000+10000}, {0x2, 0x1, 0x7, 0x60, 0xf7, 0x1f, "c8ac3f4e"}, 0x0, 0x2, @planes=&(0x7f0000000100)={0x8, 0xff, @userptr=0x76, 0x1}, 0x40, 0x0, 0xffffffffffffffff}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x428000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) r6 = getpid() pause() ptrace(0x10, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ptrace$getsig(0x420d, r6, 0xffffffffff600041, 0x0) [ 497.406915][ T7755] binder: 7751:7755 ioctl 4020ae46 7f19464f8530 returned -22 22:47:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r2, r6) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x7) 22:47:58 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r1, &(0x7f0000000200)=[{0x2}, {0x0, 0xffffffff}], 0x2) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x2, 0xffff, 0x779, 0x3, 0x4, 0x7ff}) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000000)=""/3) 22:47:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 497.668081][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.701060][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 22:47:58 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 497.721987][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.749840][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.824380][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.846752][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 22:47:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101200, 0x0) mmap$fb(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x100000e, 0x50, r2, 0xda000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 497.876759][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.889522][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.909121][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.940462][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.966184][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 497.980780][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.016626][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.049862][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.077069][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.104736][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.148150][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.186048][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 22:47:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x2000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 498.201673][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.209379][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 22:47:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r2, r6) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 498.248612][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.257943][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.266424][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.274906][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.284293][ T8377] binder: 8301:8377 ioctl 4020ae46 7f19464f8530 returned -22 22:47:59 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x80000000, 0x8000, {0x77359400}, {0x4, 0x2, 0x8, 0x1, 0x17, 0x0, "89cd26d8"}, 0x0, 0x4, @offset=0x2f27, 0x9, 0x0, r2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x60000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x89) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xffffffffffffffe1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200840, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r8, 0x40206417, &(0x7f0000000040)={0xfffffffd, 0x8, 0xff, 0x1, 0x0, 0x5}) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 498.406640][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.423765][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.454544][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.472048][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.520370][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.536695][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.546878][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.558992][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.569481][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.585169][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.599336][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.610065][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 22:47:59 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x72400, 0x0) [ 498.626947][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.638461][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.649658][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.660814][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 22:47:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x79, &(0x7f00000001c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r7, 0x7}, &(0x7f0000000100)=0x8) [ 498.684772][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.700019][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 22:47:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = pidfd_getfd(r3, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000280)={0x0, 0x707}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={0x30, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x30}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xe0}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000054) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r12 = dup2(r10, r11) syz_kvm_setup_cpu$x86(r12, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:59 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) setresuid(r2, r4, r6) [ 498.741651][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.773002][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.784026][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.826009][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.875529][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.893036][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8510 returned -22 [ 498.914408][ T8633] binder: 8631:8633 ioctl 4020ae46 7f19464f8530 returned -22 22:47:59 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r2, r6) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:47:59 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) migrate_pages(r0, 0x7dd, &(0x7f0000000080)=0xfffffffffffffffe, &(0x7f0000000100)=0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x19dd) write$P9_RREADDIR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 499.177279][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.198774][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.238325][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.252100][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.260365][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.274195][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.284722][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.294968][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.304980][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.315298][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.325774][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.337485][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.348611][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.358663][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.368182][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.378185][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.387702][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.396176][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.405737][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.413515][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.421082][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.428898][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.436537][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.445109][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8510 returned -22 [ 499.452741][ T9056] binder: 9053:9056 ioctl 4020ae46 7f19464f8530 returned -22 22:48:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:48:01 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="a00000002100000026dcc3cf3edf16f17fb240ae88fe8000000000000000000000000000bb000000000000000000000000000000009b9bf413a1de0018f71556d62a989ebefff094dd77f64ba4fa6236cc4d9cf51f6196b40b06a3cd04f4037a9a2c5f5272805d665abf4c3018708b1e1f8e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000000ac1414aa000000000000000000000000fe8000"/88], 0xa0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000000)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xc00, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000002c0)={0x0, 0xfeffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r7, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x5f], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x18e, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x93}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x801) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x17) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0x8, 0x0) 22:48:01 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = clone3(&(0x7f00000001c0)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1}, &(0x7f00000000c0)=""/114, 0x72, &(0x7f0000000140)=""/9, &(0x7f0000000180)=[r0, 0x0, r0, r0, r1], 0x5}, 0x50) ptrace(0x11, r2) ptrace$getsig(0x420d, r1, 0xffffffffff600043, 0x0) 22:48:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) r7 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:01 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="3c0e25f88e0f76d5509691c9c8021935e05e5720334e05390687603f1ef6b4ea0027674c8a76af83065b980a95388c4373dc40dc52797e54c78f3e7b3bfecfd1ddf10a872eab520d96b3496f4e1761aad4565ca9ac2923b6b221"], 0x1) madvise(&(0x7f00003a2000/0x3000)=nil, 0x3000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:48:01 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r2, r6) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 500.883333][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 500.891114][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 500.899781][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 500.908165][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 22:48:01 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@sha1={0x1, "f92db238b296057079f2d4d7bae0940133227a95"}, 0x15, 0x1) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x19dd) write$P9_RREADDIR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 500.936202][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 500.953447][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 22:48:01 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x181000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 500.977890][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 500.991124][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.001805][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.009872][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 22:48:02 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept$nfc_llcp(r5, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000180)={0x7, 'syz_tun\x00', {0x3ff}, 0x2}) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, 0xfffffffffffffffd) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCL_SELLOADLUT(r7, 0x541c, &(0x7f0000000000)={0x5, 0xa0ce, 0x1, 0x401, 0x4}) ptrace(0x10, r0) lookup_dcookie(0x38, &(0x7f0000000040)=""/222, 0xde) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 501.044040][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.052057][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.079634][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.087600][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.105255][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.112849][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.113008][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.128118][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.155008][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.184093][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.191835][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.215144][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.233452][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.242693][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.247056][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.251037][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.272793][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.274398][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.290888][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.301943][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.310048][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.329696][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.338557][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.350418][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.362968][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 22:48:02 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0x7f, 0x0) [ 501.389070][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.414163][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 22:48:02 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000000)={0x0, 0x10000, {r4}, {r6}, 0xfffffffffffffeff, 0x2000000000}) dup(r1) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="005ef604a5e352b2a3ee615f5e824a72e20bb6b7864f179953f6d70103594d2026e4f354c6faec37f023e0312973b0b3df"], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = semget$private(0x0, 0x2000000010a, 0x0) semop(r3, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(r3, &(0x7f0000000200)=[{0x2}, {0x0, 0xffffffff}], 0x2) semop(r3, &(0x7f00000000c0)=[{0x0, 0x2}], 0x1) semctl$GETVAL(r3, 0x4, 0xc, &(0x7f0000000100)=""/118) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 501.451581][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.451600][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.475604][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.524620][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.538740][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.546219][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.546322][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.570862][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8510 returned -22 [ 501.579076][ T9072] binder: 9068:9072 ioctl 4020ae46 7f19464f8530 returned -22 [ 501.622223][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.655784][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 [ 501.707886][ T9075] binder: 9066:9075 ioctl 4020ae46 7fd3c032b510 returned -22 22:48:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:48:04 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r2, r6) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:04 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) r2 = getpid() r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) tkill(r3, 0x35) pause() ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000000c0)={0x2}) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000040), 0x4) 22:48:04 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100)=0x3ff, 0x4) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:48:04 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x10001) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x185, 0x0, 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x2, [0x0, 0xa], 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x40) setreuid(0x0, 0x0) r5 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040)="81", 0x1, 0xfffffffffffffffe) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$chown(0x4, r5, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, r7, 0x100, 0x2}, 0x1f, 0x42, 0x6, 0x3, 0x0, r8, 0x5}) r9 = pidfd_getfd(r3, r4, 0x0) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000000)=0x536) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r11 = dup2(r3, r10) syz_kvm_setup_cpu$x86(r11, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:04 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @rand_addr='X\b\x00', 0x1e4a}, 0x1c) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e21, 0x1, @rand_addr="38e05d76fba9959a1f4d8f507e031f4f", 0xa89}, {0xa, 0x4e20, 0x8, @loopback, 0x4}, 0x7, [0x5, 0x4a, 0x3, 0xffff, 0x8001, 0x0, 0x8001, 0xc1]}, 0x5c) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 503.948644][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 503.965826][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 22:48:04 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB=','], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_enter(r1, 0xf80000, 0x7fffffff, 0x2, &(0x7f0000000080)={[0xae3f]}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 503.998171][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 22:48:05 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) [ 504.050500][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 22:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r4, 0x1, 0x1}, 0x40) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="cc008a08960100005a01000001040000000200007fffffff000000000000000005f5fc6a9fab08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00"/1831], 0x727) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) getsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$nbd(r3, &(0x7f00000000c0)={0x67446698, 0x0, 0x1, 0x4, 0x1, "6ebd499a473a70a58c3244844b0512e27eb8db855ca6572ac6924605f1d979447b6d85e1e530532e5b6135cccde19ab905aca898f902bf5f8200d606d135cd463c4c426589c8d954eb65b13939a34152d928dc2cd618085976360cfd7cf9be3a08c18b4b7400ce7bdb9668665b1a2f69c985577da8ae97fa04ac"}, 0x8a) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(0xffffffffffffffff, r7) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 504.136185][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.149464][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.157930][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.168319][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.176943][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.185327][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.194406][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.202859][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.210769][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 22:48:05 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() pause() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_RMID(0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1a83f090b8656046, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x200300, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x4100, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000200)={@none, 0x0, 0x400, 0x1, 0xf59, 0x89, "1c4ddfd5a30fbb926adc09630d9f6a0e513599c3fc6234409c2ea97b719dd50804270a2dbb0496c7624d596f00a1a44e72c1adce209547af477b5444f71d78081ba69311b7ae76a1f8ac61646fdf8652d88ba57989762b728b5784b4fc601e1fb21c837da67ed525b6bad362dd4a95a6ee9392173b0c10a1d7bad78b05fb0bcd"}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xa, &(0x7f0000000140), &(0x7f00000007c0)=0x4) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x1, 0x501240) [ 504.262758][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.322082][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.349234][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.366389][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.387097][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.405277][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 22:48:05 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b70200008cfe0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00a0c5008500000026000000b7000000002000209500000000000000a5c45a695ecbcaf2b8e198452498a0055d5bc0842e6c1a3f1bd8c37784ae4eaeafeb6fc82b41900a1104921fc6070200252b47ce97d5aa6e18eecafbb6b6b59a20c125af2a2169719e93e4d9960a71b3e52506794a3afef7d738e7928f2e4ef01890c04b3364d07e0dcf4e71cf53c91be6b9f8345f1755a1125895b1399807cfee2b6395db8f35a0dc420c732c71f0f56e1bacb6e9845b1658cefc59b2abdab83859546b52423b155687afc22bfd7c3f91e279de7119830720faf9298d1da8ac72786f703512a9683e53119caf5c11302fdf8c9ec9ce1427c7688c8eabcfe7b642f43f1d5a0873b7d8ce7180451e21940000006c1b0b3a63e1a7c3b9e02305d85f95b287ff39d343dc59348e993ce667570f0000000000b94d1801041f83148372b1f8155e632cca10c6faeb25a28000000000000000d503b06c5408ef9348d1cc87f04543a1714f734692a123397b6bc8d1093bcdf614d90a0117da2b33444ab10b45e32e0e812bdea1e66ab057484021988ce12e0d21d4fbbe4a531d9efb2ca3d5ba143ae362eeb90fff00bc6c0000e6cb14c3770e9cabff01f764cce30bd5b07f86af3fa98c8f219adfeaf6d4f291a978ad363a9b6ed45df445f87d5bc8dd945d3cd43283a0e99e7f536bdea463ade6d75634b402ea1cbfbedbc79103139a75350301884e2213009f2405b4aba705b3620600642f0f1161f82e89dfc3c0ea4033903d3f9ec721f275f99d1717e0b3438c88804ea7a545e3488f0989034475c728ca8fcd1d7a78d76f15f4db85eeac19b2315edad5ce9b3ba96441e19ef6b3feac4cc2bfc6ef87b00dcb3b4f233c1f35140aea219c9d378b3346e5e22c81db2db8d7b7bd65dfa2a516f7d47801fc63844fab60b4baad8b0f9ee50663447704cf6a49627aff2496ccbd00ddf5eba89260254c41826dae5aa722ed81f25e485323566343143d7e6e0fed56120229956cb9093db4483769cd5a87fac05c469f2972ba47c55d6602a17592950dc04174cf39c26fa55881ba053d5637acaa87c161c917cec2d34d076720ef4ee9ffdcb484c64c97b13a62413ac9cc368fab17151bf4d5a5ead4a308c619ff1597209fc6927adee87e52944679f8993ce6a7934c3b43574c4e0a73f06d2461e69bad9a20496efa15013249ad9499000000000000001e182ca1c8032e1a6db8312f0228570ad963ec34203f30c52d39251e730f0500008b12ae21b962591725e567a8ebc7ebce44b77cce2f0fd90c86889f3b1218ade8203c4cf7b749b477b4cee2993e0500fea54608da671fce92b6c4cec6f9a1396e5bbebcb02c51c38eda1b0989a7a1e3c77863ba6229bc9d947d30822a942df0051dd0c209f8b647dc508879c84788339862e1ffe8a8062b64e56d86af3f04002fb1e2e9f218437ec3e6a64bf711f69fea22dbe2e0bb55f799f2505c919bc0a181110dd31673a95ce88e664b6a2c9bb2ca4d5c7ea19a45336573d603eaa889db04247901000100d9c97200"/1188], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x2, 0xe, 0x0, &(0x7f0000001140)="09000000081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0xfeffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x5f], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x1a0, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1e4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80800000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x4008804) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 504.421159][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.439492][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.450479][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.479412][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.509026][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8510 returned -22 [ 504.554054][ T9892] binder: 9882:9892 ioctl 4020ae46 7f19464f8530 returned -22 22:48:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:48:07 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000009c0)={0x0, 0x35, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r3, 0xffff}, 0x14}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xccf, 0xff, 0x3, 0x1ff}, {0x35c, 0x5, 0x7, 0x7}, {0x8, 0x5, 0x14, 0x1}, {0x4, 0xf8, 0x6, 0x9}, {0xfced, 0x1f, 0x5, 0x1}, {0x90c, 0x0, 0x28, 0x3ff}, {0x3b5, 0x3, 0x2, 0x8000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x167, 0x57, 0xfffffffc}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x3ff, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r5, 0x1, 0x1, 0xfffffffc}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f00000002c0)={0x101, "07d736d592578459b8232bb4ebfc8c0142782984ad02cf474ebca6e8094f2bd3", 0x8, 0xfffffffc, 0x0, 0x0, 0x1}) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x3, {0x7, 0x1f, 0xe0, 0x2028, 0x0, 0xffff, 0x1, 0xfffeffff}}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendto$inet(r9, &(0x7f0000000400)="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", 0x1000, 0x4000800, 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000200)=[0x3, 0x9]) r10 = dup2(r5, r3) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:07 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdea1ef8519b1e034}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x785, 0x3}}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xe, 0x0, [0x14, 0xd, 0x20, 0x0, 0xa, 0xd, 0x17, 0x4, 0x18, 0xe]}, {0xe, 0x0, [0x5, 0x18, 0x9, 0x5, 0x13, 0x2, 0x13, 0xb, 0x10, 0x9]}, {0x9, 0x0, [0x15, 0x4, 0xf, 0x20, 0x1d]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffff3ae}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, "bc24f0be71dd9a6df8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5d1f4f8c57a0"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, "3e17ad409f05645c658e047019bd"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6b}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10001}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x401}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x0) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:48:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:07 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv4_newaddr={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_ADDRESS={0x4, 0x3, @empty}]}, 0x28}, 0x1, 0xf0ffffff}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14010894}, 0x800) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000040}, 0x22004885) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 507.013366][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.021219][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.030272][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.038728][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.067929][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.100971][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 22:48:08 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e6fbae4234c4c052a059af41cad62b4e16db948854d69ddb2f42cc2829c4c6044f47ee3f7d47318ebf298379ecbc"], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$sock_ifreq(r3, 0x8937, &(0x7f00000000c0)={'rose0\x00', @ifru_map={0x6, 0x3, 0x0, 0x80, 0xac, 0x81}}) 22:48:08 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x544001, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001380)={0x7a, 0xfffffffffffffffb, 0x1000, 0x20, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/164, 0xa4}]}, &(0x7f0000000280)="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", &(0x7f0000001280)=""/189, 0x4, 0x2, 0x3, &(0x7f0000001340)}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000000)=0x7) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() pause() ptrace(0x10, r3) ptrace$getsig(0x420d, r3, 0xffffffffff600043, 0x0) [ 507.125927][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 22:48:08 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r1, 0x1, 0x1}, 0x40) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000080)={{0x1, 0x0, @reserved="99491900b08effe41e6eb8e81b78da8c1683b6b578743603a8669b0698df4b59"}, 0xcb, [], "ca0568fbd104f1d220e0886becff83362e62ff813a9991e0520e7d9a36c33791a8dbb352d6098ed40a639a9aad5bfeab7415168b92386985ad8568b05061f0c9acf85939201ea75c54e392ce6d9edf07837a244febad8b71db0db7faecca43b209d3a4b031d9d83f881b383a32a839a0099abf52ddf66fe75208a320744f379b3fe107a6efd74df27521a5f370060142f10e968997f3e061750afa38001cdef7780c8ada9bdb9db1b37e6b5faa57988a39bc7c8e49ca9d3277ae1cc97713739681e39340ca277aa777bdec"}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x480dc1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x23, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}], 0x2c) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={r5}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r5, 0xffff, 0x400}, 0x8) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x8540, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r7, 0x1, 0x1}, 0x40) dup3(r6, r7, 0x0) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getpeername$ax25(r4, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @netrom, @default, @bcast, @default, @default, @bcast]}, &(0x7f0000000000)=0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r3, r5) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 507.192933][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.252855][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.291744][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.318566][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 22:48:08 executing program 1: setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x6, "4b4b6a351d427c5e3c6230"}, 0xd, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f00000001c0), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f00000000c0)=[0x4]) [ 507.386316][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.411788][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.420324][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.438066][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.448233][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.460711][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.470685][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.546558][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 22:48:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r2, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffeb7, 0xa7d3694bea630018, 0x0, 0x0) [ 507.588758][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.638115][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.656826][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.745806][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.761651][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8510 returned -22 [ 507.812828][T10595] binder: 10591:10595 ioctl 4020ae46 7f19464f8530 returned -22 22:48:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:48:10 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000000)) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() pause() ptrace(0x10, r2) ptrace$getsig(0x420d, r2, 0xffffffffff600043, 0x0) 22:48:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000080)) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r1, 0x1, 0x1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r2, 0x1, 0x1}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="4b8a00000000000000002001000000000400000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="000000000600"/28, @ANYRES32=r4, @ANYBLOB="000000000100"/28]) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r9 = dup2(r7, r8) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r11, 0xc0505350, &(0x7f00000000c0)={{0x40, 0xd0}, {0x75}, 0x5, 0x5, 0x8}) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) [ 510.068709][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.077042][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.098700][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.108758][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.123979][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.139658][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.151719][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 22:48:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10083, 0x0) dup2(r3, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) 22:48:11 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x80000000, 0x213cc2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000140)={0x40, 0x7f, 0x80, "623ac5809526d9106d3e4eb6b6ae28b2b0e7896e8e94c92fb6c43d3c032465e1651a564e2ed12ba77530e7643a40d79e8a97bdfc2cd2c90128bb28a73d09288c"}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="3efdce2f2b3270673cca26f41966fe5d697af0eb6d3a75dd3c24243141d7457b3a3c32fd2049cc4fbf6c74468d32036f789932298665f8097762f3f3921bd6b828cdb21fdfa06810cf410f40a428ec425b3d733d2538b080a93f703b69c47b0c73fac144e86b08cbe09ad5f2dc265824f0b4c5e219a46e79d87583dd08715ecf6bf1e4ea663c53d9e9b134") pause() ptrace(0x10, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RCREATE(r5, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x4, 0x8}, 0xfffffff8}}, 0x18) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 510.175897][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.209303][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.264211][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.309417][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.357069][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.367015][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.460530][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.514585][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.566272][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 22:48:11 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace(0x11, r1) ptrace$pokeuser(0x6, r0, 0x5, 0x1) r2 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0) keyctl$set_timeout(0xf, r2, 0x8) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) [ 510.621673][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.691718][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.706944][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.738854][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.763270][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 22:48:11 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400}, 0x40) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r1 = getpid() pause() ptrace(0x10, r1) ptrace$getsig(0x420d, r1, 0xffffffffff600043, 0x0) [ 510.782416][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.805102][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 22:48:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x171}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r4, 0x1, 0x1}, 0x40) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000380), &(0x7f0000000500)=0x4) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000580)={"706fc784d45b98680fce54f48915a1c7d1cdeb25b2f89d7b9c7a492851f426bc6fd3be55e5800d2f183d1e59d17a425b0f4e842eab6c00e4d6b2fc1c8f905a7a5aca4e12f5320acd162a9034e6b30a735bd76fc841733cc18b2464cac4f663fc6cf280d896a7c9bbb7fcb0081dc7194ea87b87f3e4f22f38e1592168412402b3d5d9f0289de3939c5959b2139a44d6726a2e7a340c74f1cd51d3b46f69dfaa1af3e3e8f93d8010253fd1aafe12a6a14602ccd5dae29f8fbbdedc0eeef98fdfabcd31123b8bb0790f8b6a871923d8017514c2ecbef977d6bcc060f25f940e7d38dbad2186569f0e63c1f56f7c9409c0584a235387c908935c10e2b572fdd1b7c6ef646046349e64bd15b0bdba940912dbea5367e6f234f71815e472f81648172912371669b899f5c615bb1ddc89997717a95bbfab56db4c3bb571bceed20057360c8e17f111631ceacc3aadec543e7c3a3f2f0db1338909ad8161f36bdb021e7072cdf7b49510ca969e1bb81dc70a6b25494aed266c2851c9a836f8dea081fc77042d67521755204eeee8affd22ac9e258c3f3953a9334e815a623205781c7db2fd856fd4146ca13511862241a41ef931d83f028a2ae49ffff35dcfcf98e458c86313b7d178722115ebb24e4db1d63d5ae8dd022b3d9d1c04d7a9f7f9a9eb378103300a6aab50767a307bbd4350c8d3ba4e70fbacd17d9e98a312919f23e2fd3505bf18f90c5ae94520a985934d379101fecbce996ee1ba9037c9e6cee7f2c07d432893122cffa200b55a28e298cd29080ef467cb08abcbe197178486413d89c3caeda2f36fc5f1156451a346f799724373a736315244d008940277d9296e69edaa06b3e10ccbf2197bd5567c807dcaf03e5df3aaac328b6710e7430911eec6daf908a0d2a77a586906c68fc958e2dd0bc6895b13be1839f601ea053f8d7c27f9f0db512e85b30064aceb9718b88390d88a6d4eb047502e2c5a7650e637081a662459189932f3a056fca365ed96b2320143eb069cc3a8aa026f0c1b8f72b38a1233d806a00ed13a765e89bc923d7f5da2b07e6416de9d1dc74de5ea2622fae3c69e3769382ce2a3dd6a4d11a446c528ff02db99fa999c16c8212f987f232de25e3210065a49e8f046fabee209a6e967d53f2fe78c8903bb6361a7babcf1150505b6307abe6b160f8dd70793198f0296d3e71d756cfb032201f81ac4a018ae6062a7d4ed6bd0b602e5b851bc0ce33b49534111eda61604e408feeece6cc497a7dd2755c7ab44a2f8a1232dc3cca289056f36b9b3f6adf4b50ddac2b562caaf19e99ade7b6c77da030630aed75a7d0ab76628fe8c84b88f6181c69f56731bd7f403a68222e3c112e7cc47129317f1a32e64b0118084c283bc498df482056e9329372eab3d1ef1e4f799eb1e093d3c10d817526c2bafd35d5394d9908e35aebb325b"}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="e8968026f36c7b62"}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = dup2(r3, r5) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r7, 0x1, 0x1}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fe8000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fe6000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400)="20551e94645f61eda2f6efbf523f923877f24ad5b4c042d0c64e701668301e9ca3c03ec04a93d0793c0772ac42d73a24cb48225e8b41e30f73dd36544d145a475161e984ecbddde0c133c7ca0550b29e", 0x50, r7}, 0x68) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_PCI_DEVICE(r9, 0x4040ae72, &(0x7f0000000000)={0x100, 0x7fffffff, 0x2, 0x1, 0x8}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') [ 510.842815][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8510 returned -22 [ 510.850697][T11405] binder: 11403:11405 ioctl 4020ae46 7f19464f8530 returned -22 22:48:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 511.131245][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.146488][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.159483][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.173120][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.188213][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.197907][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.222416][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.245493][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.278897][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.289431][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.309530][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.335123][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.346741][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.357960][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.377234][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.399845][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.425257][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.447135][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.470945][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.506723][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.529751][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.567795][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.586780][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.619928][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8510 returned -22 [ 511.639397][T12187] binder: 12129:12187 ioctl 4020ae46 7f19464f8530 returned -22 22:48:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x84c1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_S390_UCAS_MAP(r7, 0x4018ae50, &(0x7f0000000000)={0x13000000000, 0x4, 0x3}) 22:48:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(0x0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:48:14 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r4, 0x1, 0x1}, 0x40) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000000)={0x3, 0x3, 0x4, 0x10000, 0xf23, {0x77359400}, {0x2, 0x8, 0x3f, 0x1f, 0xed, 0x7, "54dcd6cd"}, 0x3, 0x4, @offset=0xeebf, 0x1000, 0x0, r4}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000080)) sched_setscheduler(r1, 0x5, 0x0) ptrace(0x11, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x110, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f00000001c0), {[{{@arp={@local, @loopback, 0xffffffff, 0x0, 0x9, 0x9, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x40, 0x2, 0x7, 0x2, 0x7f, 0x1f, 'wg1\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x144}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @loopback, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@rand_addr=0x9, @local, 0xffffffff, 0xffffff00, 0x5, 0xb, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x47bd23785bec4bf5, 0xff, 0xff, 0x0, 0xff]}}, 0x9, 0xec7c, 0x1000, 0x68, 0xb3, 0x1, 'veth0_macvtap\x00', 'bond_slave_1\x00', {}, {0xff}, 0x0, 0x90}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2ed6, 'system_u:object_r:udev_exec_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:48:14 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x0, 0x70bd21}, 0x41}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x200000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000880) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_ifreq(r4, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:48:14 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000006005cb5439cd36c1060b32f2b", @ANYRES16=r6, @ANYBLOB="01000000000000000000020000000900010073797a3000000000"], 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x84}}, 0x20000080) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, 0x0) ptrace$cont(0x9, r8, 0x0, 0x1) 22:48:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 513.195973][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.208544][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.216651][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.226219][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.234670][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.277297][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.310691][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 22:48:14 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fc) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3f) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 513.333977][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 22:48:14 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f00000000c0)) ftruncate(r1, 0x19dd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000080)=0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:48:14 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000240)=""/62, &(0x7f0000000280)=0x3e) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="87957804ccb19448f2a3af8709209806272d724bcbff7f22f5c1eeaa8362b56afc", 0x21, r2) set_robust_list(&(0x7f0000000300)={0x0, 0x4}, 0x18) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x3, 0x24, 0x4f, 0x80000000, 0x8, 0x4, 0xfffffffffffffffe, 0xff3, 0x6}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/146, 0x92) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r5, r6) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 513.413077][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.465694][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.548372][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.589231][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.607335][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 22:48:14 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) [ 513.657137][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.674796][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.689693][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.698868][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 22:48:14 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x43d602, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) eventfd(0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) prctl$PR_SET_UNALIGN(0x6, 0x3) [ 513.757423][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.768148][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.787888][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.804058][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 22:48:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x79, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r4, 0x78, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x35}, 0x2}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x5, @rand_addr="a1536b12f187dfed72f5c3830bb7214c", 0x3}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}]}, &(0x7f0000000140)=0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_aout(r8, &(0x7f0000000200)={{0x107, 0x0, 0x2, 0x148, 0x23c, 0x80000000, 0x1e, 0x401}, "1dd9947e8148dc0ea838833ee6ab823eb2b3668f1413d54da312af4aa4bd3a8292ecead1ba861594068af8", [[], []]}, 0x24b) r10 = dup2(r8, r9) syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 513.896919][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 [ 513.962595][T12261] binder: 12252:12261 ioctl 4020ae46 7f19464f8510 returned -22 22:48:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:48:17 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r1, 0x715, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xeb82}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4cfe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x800) clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = getpid() pause() ptrace(0x10, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='\x00'], &(0x7f0000000100)) ptrace$getsig(0x420d, r7, 0xffffffffff600041, 0x0) 22:48:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:17 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x6, 0x7f}, {0x7f, 0x1f}, 0x5, 0x1, 0x5}) r0 = getpid() socket$inet_udplite(0x2, 0x2, 0x88) pause() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10001, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x6, 0x4) ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) 22:48:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x630102, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)={r5, 0xfff, 0x15b, "f121e2a670e45c6a1a4bf3eb0f8e5e2ca51e1f10772dd1a6a8e6758c4e41f8ae2e6354a34b87489bca4a923057ae4f96777a0e7996544470283933161350a4dabbba1abff879a0ea36a66a9bb02154951257a67103d162a1e413468016f5f4e6862d032006782983ca3962f244e0baf4f8342d5181bb8e10337c1b57f00666801006e10a0e94dcbf67921edd6a249d4b20281beb7dcbabeed269c6e4c5ac200af48ee06e9b39bc297766ecc96f25a199388ae9b77534eae2d3e84efb0619"}) r6 = dup2(r3, r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000600)={0x2, 0x1, 0x13, 0xd, 0x198, &(0x7f0000000200)="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"}) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r2, 0x1, 0x1}, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r4, r5) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="ae873b4cc7b0a9f19194257e549c10640a436ca86a02e33c62", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf2502000000200002801400010000000000000000000000ffff7f000001060002004e2000001c00038008000500e000000108000500e000000208000500e00000015400028008000300000000000800080000040000080003000100000008000400ff01000006000e004e210000080004007f00000006000e004e220000080008000800000006000b000200000008000300030000001400028008000900ffff000008000500000000000800050001000100080005001f0800001400028008000700ff03000006000f00ff030000"], 0xdc}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) ftruncate(r1, 0x19dd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$vhost_msg_v2(r7, &(0x7f0000000400)={0x2, 0x0, {&(0x7f00000002c0)=""/161, 0xa1, &(0x7f00000001c0)=""/6, 0x0, 0x2}}, 0x48) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r8, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 516.329836][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.346680][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.356520][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.368226][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.378064][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.389089][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 22:48:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000140)={0x744, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_IE={0x713, 0x2a, "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"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @remote}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x744}, 0x1, 0x0, 0x0, 0x40}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000080)={'bond_slave_1\x00', @ifru_flags}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005020000000000796ba342a466ed20320b661d17c24f613e91eaad9db357c6b285f18168191111702a3c06cb6b68050d53f3f98b27ab4f29066d7bc406c30771dde666907c22f546839e624d3684db967d141cdd62efc9f57fd744a8f9f1b0b1b3a587008242c8f58dc8b0143c1fec75b515511f2f83c77e99e4d66579aeca563c5906741138a673fe6f9d86d2d80cff07000000000000001ee17fcb18e9ef4ca834c2095b9106cb86c7a1022429454d802b8c1cfdfc9831029d3612a33151c8b3718e0de42342ec4529555bc6281f2762d2acc770b3772160a1420b394fd3c5649810a7d877839748c268046d23f9bacd2e484fe642147758ce5244b7800b7843d3d69e7a4b247de1632e31fb64c5fd28a1bc29dd44b1ef23b3bb1a19b93eebef8eae4a707dc6043b4853eeec78a0d061e084840257be293e20abbfeb7b1ce39ad7b31b0f7a2900"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, r5, 0x1, 0x1}, 0x40) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) [ 516.440351][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 22:48:17 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x7) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000000)=0x900000000000, 0x8) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:17 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000000)={0x80000001, 0x3, 0x8}) [ 516.493362][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.529272][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.559095][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.571830][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.603120][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.635181][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.698672][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.754318][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.769212][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.779746][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.788278][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 22:48:17 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="dd2e44188672057e8197f62957ac38a263eb415f0d30934ca0ba7afa0ac240"], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 516.797632][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.806120][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.815455][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.823952][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.835197][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.848738][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8510 returned -22 [ 516.860467][T13010] binder: 13004:13010 ioctl 4020ae46 7f19464f8530 returned -22 22:48:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r3, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:17 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0x0, 0x0) [ 517.134610][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.148329][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.170054][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.180922][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.205159][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.224107][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.251776][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.268347][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.293188][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.311944][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.319813][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.348980][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.361626][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.369512][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.392098][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.400091][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.409002][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.417543][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.427305][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.436446][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.445516][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.453925][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.463163][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.471212][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8510 returned -22 [ 517.479171][T13557] binder: 13552:13557 ioctl 4020ae46 7f19464f8530 returned -22 22:48:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffeb1}, {&(0x7f0000000240)="6653405c0001d12f0000000000ae47eddc3f4912997f00000000278dd8f47d0100005ae64f8f7cd76931bc36460234432479aed75d492b41fd983f79e65199615607672c59957ab6ad602ea04db364bf68e6faa53367f05f4ad6000800002f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca42afa924edfe92175a1f0000007a08060feace34b52dde5f75a033703700006de84c6fa1a2da67d3a95563698c7e24ab45f0866f15da7f9a3effa0eda5cbf7c48dc4cd66c78c054c938810b4aa955121cc6eaea6a2f951afd29fe8b226cea0e098887bfce1904869628199a1", 0xe5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 22:48:20 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r2, 0x100) ioctl$TIOCNXCL(r3, 0x540d) 22:48:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x4, 0x4, 0x1, 0x0, r5, 0x0, [0x0, 0xa], 0x0, r3, 0x1, 0x1}, 0x40) r6 = getpid() sched_setscheduler(r6, 0x5, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x7ff, r6}) 22:48:20 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x11, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x79, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r5, 0x80000001}, &(0x7f0000000040)=0x8) r6 = dup(0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) lseek(r7, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', r7}) r9 = dup2(r2, r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = dup2(r3, r4) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0x94, 0x40, 0x40, 0x4, 0x2, 0xf8, 0x80, 0x0, 0x0, 0x9, 0x88, 0x83, 0x2}, 0xe) r11 = getpid() sched_setscheduler(r11, 0x5, 0x0) sched_rr_get_interval(r11, &(0x7f0000000000)) 22:48:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xfc7ffff, 0x11, 0x80000000, r0, 0x0, &(0x7f0000000000)={0x9b090a, 0x1, [], @value=0x6}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = dup2(r2, r6) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) [ 519.480815][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 22:48:20 executing program 3: clone(0x4c30da00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x4208, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0xa8d) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fb540681a1ec4eb23167e7a3cfca29db906c5d0f32fdefdee1a58fb448004bb41b277ff4cf57eeeb9d048ec36fa5e46047a1d2d3fbab202666865bea067a0c364540de9ebf0ea4df351921c11ccd0e3c499255eea538a8"], 0x54, 0x1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x44a682, 0x0) ptrace$getsig(0x420d, r0, 0x0, 0x0) [ 519.524517][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 22:48:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xb4, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc25b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @local, 0x4}}}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9df5}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48e}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = dup2(r6, r7) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0) 22:48:20 executing program 5: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x420d, r0, 0xffffffffff600043, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000001540)=0xc) setreuid(0x0, r2) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r5 = socket(0xf, 0x2, 0x2) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0x0, r6}, 0x10) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000001580)=r6) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x5, &(0x7f0000001400)=[{&(0x7f0000000080)="91335d155a7158e050dd30ee23ca25480abc14b1a3c455eab4c29adacc9f2e8b63c7550ef628d811c08a79336e48d8f8b45f23aa6fb8accfb00e7080d7fb2d1558c3304708b266ee9fb69fb7a828de4f07eb2bedd3faaf3c39c03e062700a5588a975c598178342ee5edeccda1e590aaebe10936026a56af28d5a6aa8bb54b23f3a9c16e7ae040670809cbd4a920c850beb58e484ad2cc230e5d68688106ab1aadd3c0b84b824a25d28ae33661db97ed3954de1d91a3295f5a8743d17dfaf849583f43cd0c21649af6f16bc77ae12ccbd220ab11c28f7595653a5d114bfe0eed810186c8091451961a28ec6c856e7d12810d94838f82f812bc03739db05f0d546b3543099a440040679a07ab4641b78dc836c94623cccb98d69e2d866c3874a02d5505efe026123b328a57e02080450d0b73ea1ce61062b3ccc1afbd80a5bec1d79c11d44aacf07670a4d77d782701699a809fe42ecffca68191ac3d5c733ea4a9214152b22d5c75bbf3c0ba76033b868dca9e723d359e8ddc047d58f345e83b4ca7be3699cf2a3bf63241d207cf7fd48c659d0d1b17ade6babe4b0e6b592a92ce1c5c257c06f183e381e1b58f3158fd9b644b7301306e3aa61793427cf36834c2abd9b99150858faea4f710df614d4fe0d6f766b130ee41f5f7fbb26c487b5e9635c3927250a8044c74461edf15966f7bbc307ce2f995738c7dc7cbcdea1632a295d2ce80745f49ce44839b51cd56b06f298388b036777bd1c18225501c8a633e1b4e6a79642bfe2ed897cfc53aabc71835b8740b2fc953b4477d21b95ca038d4f7b1ddd3ca48db48beff0a1630b63be849b4d3d90de35e62b8a3150883fb939cf896fa5586af4d83b27fcf0881bc4961bed2e4170817113856ce8d5aa48e9f4de3d9949b16475f185637eba0cc3e9d9b6f512eee469eda4967b218ce34e5d898bdaca6c081064c9c5976f43749a9327efa0a30202b422a44218809b63589e395f8bdcdec355f542792e534270c9e5315cbe2dc24e7ffae64554f83c52a8541f9a1447246f297f64ac0cba4d235983a13257e0d643e73b762b4ddc8258a3044423b747cfe2d1f67fd6fb428a764d8508781b36372aad3b9d0121601964a17aef0b3f68faa14d16d6d3c88fd077ce75d83ea2c10f9effa90388ce9e3ced3272cc99ffdc2885cc6e37ca1b40290376e2146697a4160ccdc04debc5baf6a248522702b524f18d94e4af96964e956c010c4c9663eb9c7211f86ecb138eb087c22ea9e67adb30b29444a9b8f37ee0e9fb29a1238ffbfa5fdc91420c713b7915f8d163aac449cdbdebc0f7e21e42b40cf9d805837a1db75bd2887de4997d26775ee5354bf4cbd5d7ca1fe1e05dcff0cf2bb17ad346afb028ac33c58a4ebd97a1048ebfbd4017bab4e23f6e0a627565345ff12a796af5f8af3d851b496ce36fefdc76656704bfa1456c2573943696cf97e88cba88dae76ad6c68c57f90b2311c0f989afc603a45b4f839815ec723f563e49af784e819a8c09855c66568eff54582db7e93477d9f60a2f346057fabc8f86443a2e9f91be0bc1dcf5261436d81eca76a11b71938fbb5c015ab496258ad7dc0d4f54bf4b402868f54200b7c8eb505e1234fdf17d1b81df21f4d5e8380fd25b4443a1f57dbb9e2d47df89219b1f04baed88791c315d389edd912d21fd229e8489a755fee801eaabe3d1fc82236edae3c623a78ee32f761250aab3a5d189f5424bf501126a463c5758ed954ed9236a49b9108fa86c805114aeadb9290908ba5b8ade35a4d02f0c14a286d5d93bff58a381d97cf543c6fe1904075ab2a8a0580a72f456061a06b2556810679c24c20a183611ec3665b9bac0cc1905865c4da3eba63ae65de3c5e2db4a69ed6ad4be81fe8259399c95a609b578ea087300cc12adebceea31154e2ddd45955fae347d05328a885de5d75190edc85cdc1166c14e6c5f8f1926b7daaa58879e5be5f63eef8956fc4a842845f1757fdc25d94799531ed3fa73a0c28cba7188358da47664fd14de00dd91c1a6316a9b8fa9a461b4228b9d01ef00c05769f66f2b7ce2ecf3d4d6d6a0ba1b13d99f7f90836882d0b8cadbf002ca1b7a7f91881abf65c7249211c770e5eb7bfd9af8d0ac02a698bdba1d55635a340fa466e03db5f0aa2a64722eb33cee7909fe9ddce7e5aa78e42bfffc528b975cf702fb22c09181ebe42fdf27b6ffb8305ad1efee8c654a00c55c159135c9b0f522e615e256f491935433e3eea87a55e82675ae8ac50aa8744fe039e2e1ffbcc2a4829e55374a8433655670bbff245135eee0c69389f2b9299644f414edcf451138dd3228676a1055e734789247f5ff452ccb031a2de0ad7ade154c7d2928cf4acc2ea44f76c1e632a4c89bf180c6cd2eeb7ab886d9a5e89d885105fb314f0ca07f5fdd781e5fb1a3e07c808ea92ca88382807ba36b4123b1927dc4dfe2262b5ff56b4c3284c1914b217e2116dd10fdf44726fc5ec38ce097add706ed561b12db69278bc840a0252431b7c274faedec66756ced05cdded312a75cf306b86a92ed611bd949c0c9d22c9c42f6d3b28623264016790d837b5527cd7e252163abf0caaa910e47476a0a98d9e8c66f4a56596961b3473a8104adbaac5cfe4f7986b00ac85581c33d5bd081b03f48ed74bb6ca2067b80a7694e9546ec05be8b2ee38a574ff5931c0baa6a554e685f1c5b0fab8b76e287f2f4706fa6a234e8644872ec5d28f2bdde5497ce185f8c974b0f72526bd0722859b860ca693370eb49ed4fb0fe44399895dc7f0586c1f5664875c9ace287c0e0bb306b3bd31ab1bafcde2835df3b5d2ac43b09ad09a7d15d5e26de70bf784b5cb1b260e76a92cac14ffad7849eb6c3d16dd6f91a951e12c42bcb66e8b4ad0f68f653d059d995e5da4e120cdced26ccd6d374e94bc60fab31d9ed5914adf14aab58da5422650d551dd2d3b5403e90bfb8011842e12c5c5f9ffc9259977cc84599dee34a00934693f62bd2948a690dc89384e071bec81f1e8bb17c67ffba09663279b8d7d4c4ada03b9b690c1863a4f19e5148eb2a8966cb3d658ad723e5393fd41f8145ab2fb163f984e60bf4ce619cc4eef78613b3da861380deae6b12d2c77d82d90d1c1e08896f893abc44f6fe6ed76f944c943fbfb42cda7e3e75afef0acd229895a89bdbc61a5407cadae5cfc9f9581540b113179343f2f2dd6d62aa3e7758b4e8847b1ef44e8676f6194cde2c8ac383a8939c233ecc5206b7f670197f5abb03bf9692e6140e057ac80758148a77775615843a462674736aba805f6da260322498aaee43d47b140018b91a194d8d302a6b9f53d32e6bfae3c1b987658d1e7b9e08ea8ef3634cf607b534f0a4541dea8f187e324b0908f109bf0b0fd5eade5153c39456251225341c0f4560d5e2aff3338b046107a483ee119c22688a2e0f21dc9e12e8079bec91118ba1de8637772b898bde751877d333db4f655671b8d755e39540b010d8c59d078ea92368549abaeeb98ecc4d4176d434a75e4b627f1630ae398370457e3f5bce0895c5958226c8ccf2eaf6f42ad26553b34651d847ccfdd874e76357fff78c75df3a8655580cdbf072f0d407b64f4e08d951f9cf068643345e01d70d0e78a991c7a64aa9b205272a094668984c6c83cf17ba8f28f535a7e281e89eec012342aba099bbbc9866ab4bd19252bfa12291e270c8315565ff4f9101c6222ea46e56c26860705b36eae574a89df8a1c78f086cf079d1f00d4a71bad8e2142825471b0dd69c31dcacce434aaf99a40156fc029d30bd36bb813b7a4765f001c6257757a361cac328323f2764bdba7f4797987eeaa8f86a1410166a658a2f25091e93a5d865a8732f154db7d7926d6fde9c8a41f50748b2899ade4382b37e2c6c88dcefe05d0b033d00d05f2bd8b2fa3b72d3ca22f1edcef57991b81e68229c5afdafc8714881b7fead26b483ec38c1f96b70c62ae0e21d5dc2eae5d90c80f96d673f89fa4dd0405896661a8fc88dc18b29e8f6d80767955576d4adbcc2a5122ea290645eaa0d7a49225d5af8a3a4f02230041620090333fa23f11b83c05ca1570e2799980bcda65de03972e834adf950eaf6750ec8d879efa5f1fea50b3b841cbfccf9d074588e6c777490873f13283a9ca8b1d58e2609d43ceef2dbf58ddd787c6b0c1b464ac67438c155e5e6c9c33022106b296cf9304036adcd204f4cbde2848d90341fa99cce31faa572d3cc6a2e121f9d64d3658e6dfd76918b7bf88281f3d096413a681e95399e01ce972485c0e076fe7c02b595313c32aced4ec0ca961813f545d4c064067c952b33fced4b143e318b07e6af0360c6031a49d4ac499acf088854d4045a71e87dc99f57c8de4ad44b6431588932cf7ed714541338c33fca75a6ff6ddcfd177c4f91a0a7b9a94d0117f417950be5c2062025dfe006fce029bc79e56a8f689bf6ffe19e74945457964c2072e9f58cacd4236dc0fa0baaf7d994883cb503822bf4dd1c07fb63c3d079439c118af38183921f67126fddff395def44626f49e2a24ae83ac46e484d7e9b1e5d8ce377a02c73786267ac18e8679e88d2d399dd44773b2c1265ce37ee75618cea90adf199aa08a3b58e64f7f49f752d1d73f105423b2c30b141151ff9e98df66dc6fe7123afd0a3e567cea8eaab48481a5046c5ddc76053975aa7ce08522e970eae3e4ee4841cd70aa56311f659a7d409e0b059ce18ae8ddaaca7348ae61500fd8f9d869de5402c008d0d84355727b42bc14c5bc6439fce02fd170d74361384a898dd3cc276a9345e09c3441496ecc9894c994cfa82e8caa41208a1f06860ffe75ad787ed3b76dcd8ee2f7df1cb8720367e433a5e2302feb3264ebb96c4e0c07c9f944a5909009299eebd1d826670dd92462f054ca3d0ed180ac760002f3d641f4d75a3340693566bfb111f9f4b9634a6694a89d59065e6609705a579d36e13879bbc13ccfa6929d12d915254ae426b6d5ee92c5e112e992af4919d22813837029b9a0ae97f2a1f1ca6dee29876448a11b411b4f55c612689dc2181d91cbba3717749771614752d83d6a765a09cefcecb1e47db0d168ec259ee71cd4008693538ed563ec7cb8f400956a529c67eb6bb4227f7bc2bd78351faa7a1835525ce16203e76d19cf2763cbb41bdd1939c5a18ca7d6941333f1bc4785af70e5852d867d16feb9cadc086030478be524cbf60e944bb6f21f9d5b9406c30b6fdc8d606fb519ef785f9ccfa2742d66f11fb614a87cfda6c9151d548a23331a8565a937e64f5275204c752c3f6ccf811b45029ebb75979dcde4f3b0674f4e09f65673597c6a7905ed726a9b3d3b75aa2b0ad5367f6404caf3e4fb1c77531cc816522cde1ee7ce8526aaff03085bb9ac290c680707c9961e57cad245754e38aff1c613394a206f53bc1e168c4c39e35e519f977958e870b549dee41308793521e95eb0229da5f791fe17515ba3440bed6665cc53576a939f29879e40c40812e66af034475248240a91b6bfc7b68c9b9409c2ead7de87667045498fd561d97631fc633c23358b708cc4dc540161679db7ced67f026d25881c9b9b55c4e60bfabbd393851c06e68e2420d1749f1b9cd79c4fc54e09a32bcadeabdc9899afd1459d3e3581ef5e320ad073f180b19a6bc0685ccfd476d07b19e645c87b01d6808c59a122cb129c3123101ca09b617df63146e9130fe55de44eacabcfa39a8770a061649858e23d485e487083740545163eeea13db93ab84349bfdaf1e70ed489072fac2cff3f48fca0f15198", 0x1000, 0xfffffffffffffffe}, {&(0x7f0000001080)="807684b0b518f0152575f256aa3db6efd578b2d2a332f1188477b01a534a463342d6d873948957df293aee528e24bf8f794fc38124344dc17940318f750110f1557ce96e8a4059e67cd230534fb4b19a8ea40ef6fcfee2a690e2ad9f43ec8b06313810e770ed3d96444126ff4fba8cce5c1356fcfbec0818544ac57b754c573b7ff1d0296609e7dd49a9bfc516f0d1a1212f6ca61237f87b04fc6464ed23b777fa227c06089ee4a7e23df81f1a314de1fc5bf3e77ad3b121d1db321e0c717d6c18daa6e8e7152fb9fb2f684101a02276737e9b76d3c60b479f450eb4d691811aac005e3bef28", 0xe6, 0xfffffffffffffff8}, {&(0x7f0000001180)="544a75a0890ab8690b501d277aa30a2375afcbbab4e09a6dd545489b57fa3ef6a01c3ffde1fdb6a28a5bb162b16800d5478b2555ddb69c9716ec34fccbcde3699c731261bea7f8bb3457e23196a7feb730289781185a9f7cfe1f07ee8f693f67c7232ba09d58c1465f7073c90b14b2a0534814e78c7fab45dcc6b9995ce2c02c4a3c28cedd07786e058ef2e88532ecb5205822b47eea9b2473a7581952d762df3d8b82d23af533f7c0a6a500355a5a20b2bb7900b7d3175781875065d6da95ea86f39b2f", 0xc4, 0x2}, {&(0x7f0000001280)="43a595d7e907cce46a817c04156e07e5b7e72cd9e00503881ec1350d08e6a45817cb3fdd5166708017a966547fa3a4e04e17545215c7020a0b33690c6319de3f7269e9e18c9328c1451ba2f1fd328752f4a707fdab4641c168ebd7f0b60e71a6c6918940270aaf029ce130aa61722ef539d251c9646ea06d639e3cff0c1a8af17a1209bb84a756adcaa40866d3ac1c66b6bb9ed7abe43067e07db94bf1153227b3238fb2e74e479a", 0xa8, 0xfffffffffffff9b0}, {&(0x7f0000001340)="52688f29c1c6b930b19c5d603e69b4af2c07608d1300417191d04e2ec9e03a1356ac4599a8e535a31fe8e6ede889a8c8d872d193086b40c4358dde3c78d653840e0bba416087f6b3d1f9fe126afe041ac721f0b72cab161edbd063c079cf43f44f63b864e03a667c690d2dc251aa335c79301b85f55947273ff4e6304d18dde22faff287a0ecbebc9d4cfba7a145b304780a8dc12586123b08f00afc1c3792841b2f6d9084b42d9576a31e04638413b4797b185f1b68", 0xb6, 0xbef00}], 0x20000, &(0x7f0000001680)=ANY=[@ANYBLOB="756e685f786c612c036941a221e44a8cda3662e8d21f968c202b4057d69aa21e47453858e93b58fd5e21ad5100e5af850feba0409f694c25369c9fdab9cf73349297aad02feb329eab9328a8e7c25d603527ec4ae3ab3108f3ffc619fe6620bf9f704c5296cd3716890d2c36e8acd20ce0c4546f5bacc665a063b1f4fe224202d85875000000000000000000000000000000000000004fb5dad396642034534c526bc5e79cd2f2040cc4c3bd0e5a4b95414d35ba54b5a5fef036e892e2315c14c3c0eeae4cf213a92888e9e61d2b240fcaa2400da28e00997cc5f3841f78fdeb11559b27b860f6d6c3d123e653e4228b63085c338de94c5954b0a6651c5e471116082eca680107383c166267108518ffe492e728743563d8c59310f790b330a6e617f1397242262acde5c2c508863003812afec04d90dd4ab466dfbe71a73187bc97f76fcc0912a95d72fd15937f7e90", @ANYRESHEX=r2, @ANYBLOB=',utf8=0,shortname=win95,rodir,rootcontext=staff_u,fscontext=root,mask=^MAY_APPEND,smackfshat=cpuset,seclabel,\x00']) [ 519.565048][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.594571][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 22:48:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10001, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x2000}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4400, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) [ 519.641827][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.677930][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.731670][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.758701][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.786116][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.813069][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.826448][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.838196][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.846455][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.855030][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.863007][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.870743][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 519.935070][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 22:48:20 executing program 3: clone(0x200002041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x4208, r0) pause() r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) ptrace(0x8, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r5, 0x12) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa478800e}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="080025bd7000ffdbdf2508000000580004805400078008000200f5830000080001001a00000008000300660679620800010011000000080004000300000008000400060000000800020002000000080004000200000008000100190000000800030062050000540005801c0002800800020000000000080001001000000008000200040000002c0002800800010016000000080003000010000008000300d100000008000100130000000800010009000000070001006962000058000580080001006574680008000100756470000800010075647000080001007564700008000100657468082c00028008000400c00a0000080004000300000008000300ffffffff080003000400000008000200018000001400038008000300540f000008000300030000008592c71dc07103c6b45068003da292f25c368a076c40b944ea0ef48c0e0ec96afefd8eb5fbf3badf85513e8faa05391f6991d6c8f8b5ba5b0209cc4cc026628372839dd9b38cde872f6de316677aaa92d03925d37502b4ca35a63f568ffc1411c85db8a3eee4c5ead05f6a92761687ff988e867aea9116d87b"], 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ptrace$getsig(0x420d, r0, 0xffffffffff600041, 0x0) 22:48:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x79, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x4e24, @remote}}, 0x8000, 0x401, 0x0, 0x40, 0x3, 0x1f, 0x2}, &(0x7f0000000300)=0x9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="fa2155ed0ba9f4bce03aa41820ff34b4b5c8ea25fb80ee7445d432db72332e3897b8b10f92efc1bb3010ae1aa49361962dc0b2bf0337e0c801e5ec604d657d158fbb2f41c212dd0da55d035626ccc9b3281a0a28424819b249c8f396f43f22626a5d95e43d4cd7d1522b23749b56440f309fe4e349a2dbe62670365e", 0x7c, 0x6}], 0x2000, 0x0) ftruncate(r1, 0x19dd) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='<'], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x41}, 0x2}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x5421, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 519.987135][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 520.010925][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 520.025284][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 520.061811][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 520.089768][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 520.114639][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 520.157578][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8510 returned -22 [ 520.186926][T13671] binder: 13663:13671 ioctl 4020ae46 7f19464f8530 returned -22 [ 520.481535][ T9549] general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN [ 520.493276][ T9549] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 520.501674][ T9549] CPU: 1 PID: 9549 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 520.511468][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.521529][ T9549] RIP: 0010:destroy_workqueue+0x2e/0x6b0 [ 520.527140][ T9549] Code: 49 89 fe 41 55 41 54 55 53 48 83 ec 08 e8 8a 6a 26 00 49 8d be 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 05 00 00 49 8b 9e 08 01 00 00 48 85 db 74 19 [ 520.546885][ T9549] RSP: 0018:ffffc90002377cc8 EFLAGS: 00010206 [ 520.552933][ T9549] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 520.560896][ T9549] RDX: 0000000000000021 RSI: ffffffff814c2af6 RDI: 0000000000000108 [ 520.568850][ T9549] RBP: ffff8880a1a6d0f0 R08: ffff888062356580 R09: fffffbfff185270a [ 520.576799][ T9549] R10: fffffbfff1852709 R11: ffffffff8c29384f R12: ffff8880a1a6d000 [ 520.584745][ T9549] R13: ffff8880a1a6d004 R14: 0000000000000000 R15: 0000000000004c01 [ 520.592696][ T9549] FS: 0000000000cca940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 520.601598][ T9549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.608159][ T9549] CR2: ffffffffff600400 CR3: 000000006232d000 CR4: 00000000001406e0 [ 520.616127][ T9549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.624160][ T9549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.632112][ T9549] Call Trace: [ 520.635445][ T9549] __loop_clr_fd+0x185/0x1280 [ 520.640303][ T9549] lo_ioctl+0x2b4/0x1460 [ 520.644543][ T9549] ? __loop_clr_fd+0x1280/0x1280 [ 520.649591][ T9549] blkdev_ioctl+0x25b/0x660 [ 520.654349][ T9549] ? blkdev_common_ioctl+0x1770/0x1770 [ 520.659836][ T9549] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 520.665844][ T9549] block_ioctl+0xe9/0x130 [ 520.670154][ T9549] ? blkdev_fallocate+0x3f0/0x3f0 [ 520.675156][ T9549] ksys_ioctl+0x11a/0x180 [ 520.679504][ T9549] __x64_sys_ioctl+0x6f/0xb0 [ 520.684120][ T9549] ? lockdep_hardirqs_on+0x417/0x5d0 [ 520.689399][ T9549] do_syscall_64+0xf6/0x790 [ 520.693884][ T9549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 520.699887][ T9549] RIP: 0033:0x45c6b7 [ 520.703769][ T9549] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 520.723452][ T9549] RSP: 002b:00007ffdb2858f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.731860][ T9549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045c6b7 [ 520.739968][ T9549] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 520.747930][ T9549] RBP: 00000000000002ac R08: 0000000000000000 R09: 000000000000000a [ 520.755883][ T9549] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 520.763846][ T9549] R13: 00007ffdb2858f90 R14: 000000000007ef81 R15: 00007ffdb2858fa0 [ 520.771839][ T9549] Modules linked in: [ 520.778673][ T9549] ---[ end trace 439c1af96673b7a6 ]--- [ 520.784329][ T9549] RIP: 0010:destroy_workqueue+0x2e/0x6b0 [ 520.790008][ T9549] Code: 49 89 fe 41 55 41 54 55 53 48 83 ec 08 e8 8a 6a 26 00 49 8d be 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 05 00 00 49 8b 9e 08 01 00 00 48 85 db 74 19 [ 520.809771][ T9549] RSP: 0018:ffffc90002377cc8 EFLAGS: 00010206 [ 520.816036][ T9549] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 520.824094][ T9549] RDX: 0000000000000021 RSI: ffffffff814c2af6 RDI: 0000000000000108 [ 520.832864][ T9549] RBP: ffff8880a1a6d0f0 R08: ffff888062356580 R09: fffffbfff185270a [ 520.840932][ T9549] R10: fffffbfff1852709 R11: ffffffff8c29384f R12: ffff8880a1a6d000 [ 520.849013][ T9549] R13: ffff8880a1a6d004 R14: 0000000000000000 R15: 0000000000004c01 [ 520.857305][ T9549] FS: 0000000000cca940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 520.866341][ T9549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.872992][ T9549] CR2: 0000000001c54fa0 CR3: 000000006232d000 CR4: 00000000001406e0 [ 520.881067][ T9549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.889582][ T9549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.897655][ T9549] Kernel panic - not syncing: Fatal exception [ 520.905152][ T9549] Kernel Offset: disabled [ 520.909490][ T9549] Rebooting in 86400 seconds..