9, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x6, @rand_addr="10c2ee503013b14cb0314925b6b8ad77", 0x4}, {0xa, 0x4e23, 0x7, @rand_addr="bf034907c99d41414390a19fda27a035", 0xd58}, 0x8, [0x6, 0xfff, 0x5, 0x4, 0x5, 0xbdb, 0x8, 0x9]}, 0x5c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f0000008540)='&e$\x81XK%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo-\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7R\x10\x87~\xa5\xff\x1bP\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xecZ\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xcf\x01\\\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4-Q[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\xcf\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\xfe\xcf\x8b,a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xecV2\b\xf1\xd3\xed\xb7\xc1J-\x92n$\xb5\xb3\xcc\x7fP\x12SL\xa3\x9c\xab\x91G\xbe\xd8\xe3\xe7\x8e\xb2\x81\xa4\xac5\a\xaa s\xc6W\xde\b\'\xf1\xf2\x1e\\\xa0\xb8\xbe\xaa\xb1~\xa4\xe2\xebR\xae\xfb\x12\xa5\xe5\xd1\xf4\xfb\x05\a\xb3\x83\xe4\xc2\xef\x98I\xd3&l\x06\xfcz\xd9\x90\xde#4\'\xa8\x82\xb1\xc5b\x8e\xe2\x16') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f) 02:25:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) [ 335.705164] tmpfs: Bad mount option &e$XK%/}iR @Z 懓a6ZAO%$Qw.HOo-_$Z@]t;(|C6ۉ })DC?">FRGf1l1ΈR~PqHm34Ih!(.x㝟}'s $O,3ZW5> 02:25:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3f0, 0x230, 0x0, 0x0, 0xf0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000000), {[{{@ipv6={@rand_addr="c4b2118960432ddf728ee54c7e9a0659", @empty, [0x0, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xff000000], 'veth0\x00', 'bond_slave_1\x00', {0xff}, {}, 0xff, 0x9, 0x2, 0x50}, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x19}, @dev={0xfe, 0x80, [], 0x23}, [0xffffff00, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 'team0\x00', 'bcsh0\x00', {}, {0xff}, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0x4ac}}, @common=@inet=@tcpmss={0x28, 'tcpmss\x00', 0x0, {0xffffffff, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff0000ff, 0x0, 0xff000000], 'netdevsim0\x00', 'veth0\x00', {}, {0xff}, 0xf1ea3b1fda58abef, 0x4, 0x1, 0x5}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) 02:25:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 335.891197] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:25:04 executing program 0: getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000440)=0x80) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000480)=0x6) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xffffffffffffffff, 0x482801) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x80000000, @local, 0x4}}}, &(0x7f00000001c0)=0x84) socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x72, @mcast1, 0xf2}}, 0x3, 0xffffffff, 0x100000001, 0xb0, 0xc333}, &(0x7f00000002c0)=0x98) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x800, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffb2) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000380)={0xb, {0x6, 0x2, 0x4, 0x200}}) 02:25:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0xf0ffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01070000000000180000130000000c000900080002002a95000041bdfa1dd5fb3837cbee73e97ddfa1594ee7e88021627e9ae93ecc558672e710a71eb54d2003f9771534d26500001af51422a183fb23a0ceb1850db916e871e2d7227b99a37882664fab3fb3831c8491f7695f8f60bed450431000e603107f226341bb17e42267c215888152e2b76a6ae7ef079e7198d008d73c819796a075fb8fe4f1a667183789171934db88b45918fd1292f6f30980492688c78b00432f7fa82e2bb595af1cc4d1865ee97078c86b02c08716463d619a6e5f88b823f2fbc1cee504d094f73a1e45c4a61f2f451188ad2c8a"], 0x20}}, 0x0) 02:25:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:04 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x484000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x2, 0x4, 0x81, 0x200, '\x00', 0xffffffffffffffc0}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0xc00) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x301081, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) pwritev(r1, &(0x7f0000001540)=[{&(0x7f0000000080)="9f02dd2129ea680daf", 0x9}], 0x1, 0x0) 02:25:04 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) keyctl$set_reqkey_keyring(0xe, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000080)='/em1\\(:-\\\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x20) set_mempolicy(0x1, &(0x7f0000000000)=0x5, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) 02:25:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x434, 0x0, 0x0, 0x15b874b9}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x401}) 02:25:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'bcsh0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigaction(0x3, &(0x7f0000000300)={0x0, {}, 0x0, 0x0}, &(0x7f00000003c0)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000400)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000080)=0x91da, 0x4) 02:25:05 executing program 0: r0 = gettid() r1 = socket(0x1, 0x80f, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_procfs(r0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\x9e\xd5T\xfa\aBJ\xde\xe9\xcb\xc6\x99\xec,\xa5v\xe5\x00\x00\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xd0\xcfsw\v\xd4$hG\xa1\x91NO\xb0\xaa\x9b\x15\xea\xa9K\xcd\x0ep\x0e\xd6;D3\x8e\x84\xadN\xc2\xf1\x1fo*\xdb\x8d\xc2\xfd\xb1\x821DoC\x14.\xbep\v\"1\xe8\xfc\xee\xd6\xb2*7<\x94\tgZ\xc8\xd0\xb503\x12?\xb3\x03}f$\x1a\xaf\xe0\xf8\x80\xe7\xa5\x1d\x1b\x03j\xde1\xd2TM%\x81\xfe\x86S\xd0\xcf\xf5Ci\xdf\x8c/\xce!\xdc\xb1\xcb\x96Vi\xf9\xa7SE\xac4y\xcdQ\xdc}\xe3d\xc9\xc2r\xc8>\xd9\xe6f\xca%\xaa\xd2\xe7\xa2n=lb\xd0\xf8\xb9\x06\\\xfc\xa3\x11\xc0m\aD\xdb&Z\xa0\xe4\x86p|Q\xfd\x10\x8c\fl\xca\xe6\xffB\'J\xf9M0\xfc\xe8\x83o\xf9\xd0\v\xdd') fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x40086604, 0xfffffffffffffffd) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) connect$rds(r2, &(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x28, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r3, 0x8000, 0x8}, 0xc) 02:25:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:05 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000180)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 337.402563] kvm: emulating exchange as write 02:25:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:05 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'vxcan1\x00', 0x200}) r2 = accept4(r1, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000480)={0x401, {{0x2, 0x4e22, @rand_addr=0x1}}, 0x0, 0x5, [{{0x2, 0x8, @local}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e21, @rand_addr=0x5}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e22, @empty}}]}, 0x310) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback}, 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000000400)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen(r3, 0x2) 02:25:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000000)=0x2, 0x4) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 337.932803] protocol 88fb is buggy, dev hsr_slave_0 [ 337.938621] protocol 88fb is buggy, dev hsr_slave_1 02:25:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa9000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x8004) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0xa000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000001c0)={{0x2f, @multicast1, 0x4e23, 0x2, 'sed\x00', 0x10, 0xbf2, 0x5b}, {@local, 0x4e20, 0x2, 0x7d, 0x20, 0x23}}, 0x44) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x288000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x7ff, 0x0) r6 = syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000380), 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e23, 0xffff, @ipv4={[], [], @empty}, 0x654}, 0x1c) fsetxattr$security_smack_transmute(r0, &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000440)='TRUE', 0x4, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r6, &(0x7f0000000680)={0x78, 0x0, 0x7, {0x0, 0x2, 0x0, {0x4, 0x3f, 0x80000000, 0x0, 0x2, 0x3, 0x23, 0x8, 0x6, 0x5459aca6, 0x6, r8, r9, 0x8, 0xc5}}}, 0x78) getsockopt$inet_udp_int(r6, 0x11, 0xa, &(0x7f0000000700), &(0x7f0000000740)=0x4) r10 = getpid() ptrace$getsig(0x4202, r10, 0x3, &(0x7f0000000780)) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000800)={@dev={0xfe, 0x80, [], 0x1a}, 0x1e, r7}) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000840)={{0x1, @name="07c99d70e3f4d0748f8391e45acef90b6fda2471922988d516ff384d928ef905"}, 0x8, 0x4, 0x60b8}) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x100000000) ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000880)=0xfffffffffffffffc) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000008c0)={0x5, 0x2, 0xdc}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b00)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r11, 0x1}}, 0x18) syz_open_dev$media(&(0x7f0000000bc0)='/dev/media#\x00', 0x10000, 0x0) 02:25:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:06 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x4000000000000000}) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x730}, 0x0) recvmmsg(r0, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)) r1 = syz_open_dev$cec(&(0x7f0000000a40)='/dev/cec#\x00', 0x0, 0x2) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000a80)=""/231) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000a00), 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f0000000940)=0xc) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000900)=@v3={0x3000000, [{0x4, 0x1}, {0x401, 0x1}], r3}, 0x18, 0x1) 02:25:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 338.826427] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) 02:25:07 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/238) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x26b, 0xfa00, {0x100000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 338.957957] IPVS: ftp: loaded support on port[0] = 21 02:25:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 339.328490] chnl_net:caif_netlink_parms(): no params data found 02:25:07 executing program 0: unshare(0x400) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x4400) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000040)=0x170) [ 339.465732] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.472344] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.480751] device bridge_slave_0 entered promiscuous mode [ 339.515592] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.522233] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.530469] device bridge_slave_1 entered promiscuous mode 02:25:07 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) unshare(0x24020400) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 339.607580] bond0: Enslaving bond_slave_0 as an active interface with an up link 02:25:07 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x14, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) write$P9_RLERROR(r1, &(0x7f0000000040)={0x15, 0x7, 0x1, {0xc, 'bdevI%*/self'}}, 0x15) [ 339.651915] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 339.718123] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 339.727043] team0: Port device team_slave_0 added 02:25:07 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x24020400) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 339.766316] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 339.775066] team0: Port device team_slave_1 added [ 339.789463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 339.819579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 02:25:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 339.916655] device hsr_slave_0 entered promiscuous mode [ 339.972805] device hsr_slave_1 entered promiscuous mode [ 340.015058] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 340.033249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 340.079999] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.086640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.093881] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.100554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.256358] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 340.263083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.274562] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.301046] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.343379] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 340.406979] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 340.422329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 340.430353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.438361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.454922] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 340.461041] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.488891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 340.496368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.505231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.513712] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.520207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.537934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 340.553186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 340.561839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.570595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.579002] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.585588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.594793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.609557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 340.616804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.636922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 340.647448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.659034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.677938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 340.687621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.696029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.705739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.720205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 340.727525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.736714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.751106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 340.758227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.766951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.784089] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 340.790174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.824266] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 340.848398] 8021q: adding VLAN 0 to HW filter on device batadv0 02:25:09 executing program 2: setrlimit(0x2, &(0x7f0000000040)={0x0, 0x8000000000}) mmap(&(0x7f000027c000/0x2000)=nil, 0x2000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0xfffffffffffffff8, 0x1, {0xffffffffffffffff, 0x2, 0xffffffff, 0x1, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f000027d000/0x4000)=nil, &(0x7f000027a000/0x3000)=nil, &(0x7f000027a000/0x2000)=nil, &(0x7f000027b000/0x2000)=nil, &(0x7f000027f000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000027a000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000027d000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000027a000/0x3000)=nil, &(0x7f00000002c0)="1762019a9919ac7a08d5b0604827bbf1fe761f3571343c3fc7377de2fc4ffb5ec0f9e8d2f874040f915bf0472ae97f9fc2adeddca083b5bc6acd11e67b2e9cf938afa3ea5af089f14aa266b554370db6ad214e5034141b8924beae62d96d73a49824d4f1be0910108ba7dba0e795aacaf10fbbfb3e25053052f392f2afdb43aa13c08283f7a3119286efe697b3476f62c2b0b4f49d3f9ab33c4c5b6590fdc06564058293b7c72452fb8fedf87b0ead0787c16385c68de80ba7a2bb68c7e585b216d26f7f919796c53b4518c496c758576b0196992031dcb1f51662a81888cbbac41e68", 0xe3, r0}, 0x68) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x35, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/53}, &(0x7f00000001c0)=0x78) 02:25:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00004ca000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d000000001070008000000000000000000000000bc000000b8005f007845098686cee6cec5d3ffef3bec642241f0a9ff939019ab5c8bdf47c1d97623fb72e0e3ea09643cc7d008407c49ca3d4bcfa054dc22c8bd918e02ce255214ea8d96fe33860a84dc9f17c16a0727d423d222936040b16b2487e87a734f4b15c22eb6d3fc68224980e9239c3d3426bd02a6c69e838bdf1fc91400fcf2e440d00f6bfcb1dcaa292dfdf727bad2870d98a7a3b61bedae8fd4aa4d3dd39fb5ece400b303402cea3ca65119edd049c344e6382fee17fc1df9000000"], 0x1b}}, 0x0) r1 = dup2(r0, r0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 02:25:09 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x24020400) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:09 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x2, 0x1}) 02:25:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x2}]}}}]}, 0xff9d}}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x2, 0x6}) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x2, {0x5}}, 0x18) 02:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:09 executing program 0: unshare(0x24020400) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xeb, 0x2, 0x2, "301298eef85c7879576037502e1c8d2f", "7066ad7509f5259bba639ace666b6cfd46c974b954ed6a68f5cdfaa321eef136d837b4fb62729c95a56432ba6264aa157a435d3924d2fe5387472e2a51cd0882916382432d6202e892a0c14bca13b5618c8bd937bf8e27bceb03d3cdbd4aea6371554a0ca4bdfab1595216a31360d198f360a346d9d4c2c8cbfe602ad0c0d4100aef544366a76f1b27115fd6e56b302ffc802991735cf2730823a2801de4af147d02912c161fb76eb2ee94a6bbaf96a8751a594c1c42cd227124697030d7df39b763c3a372df941e54557ebd422e4fcd64cba35a133b"}, 0xeb, 0x2) mount(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x400, 0xfffffffffffffffd) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f"], 0x1) sendfile(r0, r0, &(0x7f0000000340), 0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000280)=0x6) unlink(&(0x7f0000000040)='./file0\x00') ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x57, 0x9, 0x7, {0xfffffffffffffff8, 0x1}, {0x1ea00, 0xfffffffffffffffd}, @const={0x4, {0x6, 0x1de, 0x20, 0x7}}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000300)={0x24b3, 0x800, 0x4}) [ 341.510463] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 341.578496] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) 02:25:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x200000000000805) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100323, 0x80}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1400, 0x80, 0x0, 0x1, 0x22, 0x5, 0x0, 0x3}, 0x10) recvfrom$inet6(r0, &(0x7f0000000000)=""/66, 0x42, 0x40000000, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10001}, 0x1c) 02:25:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:09 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x5, &(0x7f0000000040), &(0x7f0000000ec0)=0xc) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) gettid() [ 341.884986] vhci_hcd: invalid port number 128 [ 341.889682] vhci_hcd: invalid port number 128 02:25:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000049c7407975f1039a0003011e03000000000000000000000000"], 0x14}}, 0x0) 02:25:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x1000}}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000001000), 0xd88) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x100050, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) fcntl$dupfd(r0, 0x406, r2) 02:25:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:10 executing program 2: r0 = socket$inet(0x10, 0xfffffffffffffffd, 0x80000000000c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)="24000000010a07021dfffd946fa2830020200a0009040008000000680c1baba20400ff7e", 0xffd7}], 0x1}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x408042) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) 02:25:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x6, 0x10011, r0, 0x0) mremap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 02:25:10 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl(r0, 0x8, &(0x7f0000000100)="00ffa0e513f2272295e3fabfa6f1c1e69b633c6a3476481334d0d03a4f30da7c1812246f317cf4dd75661929f178f2212d1c675a333d835334eea92ba197902a39af1e8f137058a94f710f89c0ab13d26b6148243da5075371ff9311662e03b21505dbe52847") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000003c0)={0x21, 0x3, 0x0, {0x1}}, 0x21) 02:25:10 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44831, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) 02:25:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:10 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x408000, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:25:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa02, {r1}}, 0xfffffffffffffe0b) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 02:25:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:11 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x13, &(0x7f0000000040)='user\x00em1(,#nodev$*\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000100)='loginuid\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x10000000000000) 02:25:11 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) write$UHID_DESTROY(r0, &(0x7f0000000000), 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'eql\x00'}}) 02:25:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) unshare(0x2020000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="fda22e7289a272097e7b8aa4faea2d49", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="8d9bba6c3ac860541cbc5db00e213a80", 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace$getregset(0x4204, r2, 0x206, &(0x7f0000000200)={&(0x7f0000000180)=""/95, 0x5f}) 02:25:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0x4e22, @rand_addr=0x8d}}}, 0x88) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x1, 0x0, [{0xffff}]}) 02:25:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:11 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$capi20_data(r1, &(0x7f0000000180)={{0x10, 0x6, 0x82, 0x0, 0x0, 0x1f}, 0x5c, "0d4452c7e99a5320092afc88db52d52fc54231d367cdd9b01bb478ae793641955e89df167cacc30ac441bcd22e72eb6dc4ddcc1052bbf22fcc346bbbddfe2a09820e804e72635d2c2fa0db173ceaa37876bac98ef6ebcd8e3718dcac"}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) 02:25:11 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$bt_bnep(0x1f, 0x3, 0x4) write(r1, &(0x7f0000000000)="58a6248a39524a9434a958a57d691bda4875938aee5ec4c0ea7f5761bc49", 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() fcntl$setown(r2, 0x8, r3) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) [ 343.738158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'. 02:25:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) [ 343.803351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'. 02:25:11 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x6, 0x8, 0x3f}, 0x5) r1 = socket$inet6(0xa, 0x80003, 0x5) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x800}, 0x1c) 02:25:12 executing program 0: r0 = socket$inet(0x2, 0x7, 0xffffffffffff1e46) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3c, &(0x7f0000000580)=@fragment={0x2f, 0x0, 0x8001, 0x9, 0x0, 0x0, 0x66}, 0x8) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x10002) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000140)={0x0, 0x8, 0x2000000000000, [], &(0x7f0000000100)={0x9b0943, 0x80, [], @string=&(0x7f00000000c0)=0x5}}) readahead(r1, 0x7fff, 0x400) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) socket$inet_udplite(0x2, 0x2, 0x88) getgroups(0x5, &(0x7f0000000440)=[r3, r4, r5, r6, r7]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 02:25:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socketpair(0x0, 0x5, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xef35, 0x6, 0xf758, 0x100, 0x20, 0x80880004, r2}) unshare(0x28020400) bind(r0, 0x0, 0x8) 02:25:12 executing program 0: r0 = socket(0x22, 0x2, 0x4) read(r0, &(0x7f0000001500)=""/4096, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:25:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:12 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x80, 0x0, 0x2c8}) 02:25:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x005\xab\xe1\xe8\r\x90>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1J\\\x8f\x95\xf5\xd2\x96\x8a\xe8\xc7g\xe9\xd1\x8f\xd6\x9a') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000080)) 02:25:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x4, 0x0, 0xfffffffffffffec4) 02:25:13 executing program 2: lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "bda93626e17a9e"}, 0x8, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0xa) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x125000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x2, 0x4c0, [0x0, 0x200003c0, 0x200006b8, 0x200006e8], 0x0, &(0x7f0000000180), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x0, 0x22, 0xfbfb, 'nr0\x00', 'vlan0\x00', 'ip6tnl0\x00', 'bond0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf0, 0x250, 0x2c8, [@cgroup0={'cgroup\x00', 0x8, {{0x4}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x15}, [0xffffffff, 0xff, 0x0, 0xffffff00], 0x4e24, 0x6c, 0x6, 0x4e24, 0x8, 0x1}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8000, 'system_u:object_r:iptables_exec_t:s0\x00'}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x9d, 0x800, 0x0, 0x0, 0x0, "85c489b74393d667120bf476ae04bde822f88d8be85ac3b3cf9de0cfc973dd3b6fe47b4d7d513769817419e0ed03f0093590db8498683b02fd3fc473145ffbf4"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x9104, 'ip6tnl0\x00', 'irlan0\x00', 'ip6gretap0\x00', 'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff], 0x70, 0x118, 0x168}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@nflog={'nflog\x00', 0x50, {{0x3, 0x1000, 0x4, 0x0, 0x0, "d479b66cbec132a5dc716a85b4102378601881ae73a35138d6018f5c402ff806159e9ec85c0a626264f8648ac374058e0489a2403e5c04a02ffde7aead3a659b"}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffffffffffffd, 'syz0\x00', 0x6}}}}]}]}, 0x538) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000831e0000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00\x00\x00\x00\xf9\x8b\x00'}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)={[{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5300000044a6aeabec2e02fc17000000ee0015080000000013db98200000000046000008000000006eef4799ec000b0000b8188e23061291cdaa01008466e3a14280af72dd000000add882730e590849d92a870000000000"], 0x58) 02:25:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 345.132841] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns 02:25:13 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0xa9813, r0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 345.324946] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 345.353569] pit: kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 345.395399] pit: kvm: requested 30171 ns i8254 timer period limited to 200000 ns [ 345.446789] pit: kvm: requested 30171 ns i8254 timer period limited to 200000 ns 02:25:13 executing program 1 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 345.618503] FAULT_INJECTION: forcing a failure. [ 345.618503] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 345.631073] CPU: 0 PID: 11291 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 345.638219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.647618] Call Trace: [ 345.650277] dump_stack+0x173/0x1d0 [ 345.653970] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.659229] should_fail+0xa19/0xb20 [ 345.663039] should_fail_alloc_page+0x212/0x290 [ 345.667773] __alloc_pages_nodemask+0x4a2/0x5e30 [ 345.672600] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.677846] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.683107] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.688382] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.693636] alloc_pages_vma+0xd26/0x1970 [ 345.697860] handle_mm_fault+0x5528/0x9e30 [ 345.702202] __do_page_fault+0xdfd/0x1800 [ 345.706441] do_page_fault+0xe9/0x5c0 [ 345.710302] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 345.715061] ? page_fault+0x2b/0x50 [ 345.718731] ? page_fault+0x8/0x50 [ 345.722401] page_fault+0x3d/0x50 [ 345.725900] RIP: 0033:0x40740d [ 345.729149] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 46 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 345.748130] RSP: 002b:00007f70f03350a0 EFLAGS: 00010206 [ 345.753573] RAX: 0000000000407400 RBX: 00007f70f0336c90 RCX: 0000000000000000 [ 345.760892] RDX: 000000002001e000 RSI: 0000000000000005 RDI: 0000000000000004 [ 345.768199] RBP: 000000000073bf00 R08: ffffffffffffffbd R09: 0000000000000000 [ 345.775524] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f70f03376d4 [ 345.782831] R13: 00000000004c64e2 R14: 00000000004db608 R15: 0000000000000006 [ 345.795106] syz-executor1 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 345.803783] CPU: 0 PID: 11291 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 345.810920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.820302] Call Trace: [ 345.822949] dump_stack+0x173/0x1d0 [ 345.826635] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.831887] dump_header+0x1e7/0x1960 [ 345.835737] ? apic_timer_interrupt+0xa/0x40 [ 345.840192] ? write_ext_msg+0x890/0x890 [ 345.844314] ? _raw_spin_unlock_irqrestore+0x4b/0x70 [ 345.849493] oom_kill_process+0x301/0x1020 [ 345.853800] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.859093] out_of_memory+0x1250/0x1d00 [ 345.863251] ? mutex_trylock+0x151/0x260 [ 345.867376] pagefault_out_of_memory+0xdd/0x130 [ 345.872122] mm_fault_error+0x38c/0x5d0 [ 345.876166] __do_page_fault+0x1049/0x1800 [ 345.880478] do_page_fault+0xe9/0x5c0 [ 345.884332] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 345.889126] ? page_fault+0x2b/0x50 [ 345.892816] ? page_fault+0x8/0x50 [ 345.896396] page_fault+0x3d/0x50 [ 345.899891] RIP: 0033:0x40740d [ 345.903144] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 46 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 345.922094] RSP: 002b:00007f70f03350a0 EFLAGS: 00010206 [ 345.927509] RAX: 0000000000407400 RBX: 00007f70f0336c90 RCX: 0000000000000000 [ 345.934811] RDX: 000000002001e000 RSI: 0000000000000005 RDI: 0000000000000004 [ 345.942131] RBP: 000000000073bf00 R08: ffffffffffffffbd R09: 0000000000000000 [ 345.949434] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f70f03376d4 [ 345.956730] R13: 00000000004c64e2 R14: 00000000004db608 R15: 0000000000000006 [ 345.965206] Mem-Info: 02:25:14 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xffff, 0x8001) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) clone(0x40880000, &(0x7f0000000000)="62bb589cb2d37ec0dcc6cc", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)="77382a9c55034d906872db057b855d6b026ef96d0a8050b472f44da48f0b54f01459c4c3f237ea4fc3dc4f4f350450e4955613ad74f580b9") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) accept$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000003a40)={@dev, @dev, 0x0}, &(0x7f0000003a80)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003ac0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000003bc0)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x201402}, 0xc, &(0x7f0000003e40)={&(0x7f0000003c00)={0x210, r2, 0x109, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x4}}]}, 0x210}, 0x1, 0x0, 0x0, 0x24008080}, 0x4080) [ 345.967741] active_anon:81278 inactive_anon:191 isolated_anon:0 [ 345.967741] active_file:7441 inactive_file:25797 isolated_file:0 [ 345.967741] unevictable:0 dirty:67 writeback:0 unstable:0 [ 345.967741] slab_reclaimable:4140 slab_unreclaimable:9555 [ 345.967741] mapped:30624 shmem:245 pagetables:671 bounce:0 [ 345.967741] free:1073423 free_pcp:734 free_cma:0 [ 346.001388] Node 0 active_anon:325112kB inactive_anon:764kB active_file:29620kB inactive_file:103188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122496kB dirty:268kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 235520kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 346.029950] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 346.055941] Node 0 DMA free:15904kB min:212kB low:264kB high:316kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.068425] IPVS: ftp: loaded support on port[0] = 21 [ 346.082276] lowmem_reserve[]: 0 2800 3490 3490 [ 346.092165] Node 0 DMA32 free:1171180kB min:38380kB low:47972kB high:57564kB active_anon:319888kB inactive_anon:40kB active_file:20000kB inactive_file:98084kB unevictable:0kB writepending:240kB present:3129332kB managed:2872032kB mlocked:0kB kernel_stack:2944kB pagetables:2444kB bounce:0kB free_pcp:1152kB local_pcp:700kB free_cma:0kB [ 346.122064] lowmem_reserve[]: 0 0 690 690 [ 346.126290] Node 0 Normal free:18612kB min:17656kB low:20020kB high:22384kB active_anon:5352kB inactive_anon:728kB active_file:9620kB inactive_file:5140kB unevictable:0kB writepending:52kB present:786432kB managed:706992kB mlocked:0kB kernel_stack:10432kB pagetables:380kB bounce:0kB free_pcp:848kB local_pcp:428kB free_cma:0kB [ 346.155563] lowmem_reserve[]: 0 0 0 0 02:25:14 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd, 0x9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x80323, 0xc7de}) r1 = getuid() r2 = getgid() write$FUSE_ATTR(r0, &(0x7f0000000040)={0x78, 0x0, 0x2, {0x83f, 0x7, 0x0, {0x3, 0x9, 0x10000, 0x20, 0x5, 0x8, 0x6, 0x3, 0x8, 0x4, 0x5, r1, r2, 0x7f, 0x9}}}, 0x78) [ 346.159433] Node 1 Normal free:3087116kB min:42048kB low:52560kB high:63072kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3141296kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.187200] lowmem_reserve[]: 0 0 0 0 [ 346.191091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 346.204581] Node 0 DMA32: 0*4kB 1*8kB (U) 4*16kB (ME) 11*32kB (UME) 118*64kB (UME) 54*128kB (UME) 4*256kB (UE) 2*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 280*4096kB (UM) = 1168936kB [ 346.221123] Node 0 Normal: 3*4kB (UME) 3*8kB (UME) 9*16kB (UE) 30*32kB (U) 115*64kB (U) 63*128kB (U) 6*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18612kB [ 346.236061] Node 1 Normal: 5*4kB (ME) 5*8kB (UME) 11*16kB (UME) 7*32kB (UME) 5*64kB (UME) 6*128kB (UME) 1*256kB (M) 6*512kB (UME) 8*1024kB (UME) 5*2048kB (ME) 748*4096kB (M) = 3087116kB [ 346.253127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.262090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 346.270719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.279675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 346.288361] 33514 total pagecache pages [ 346.292454] 0 pages in swap cache [ 346.295935] Swap cache stats: add 0, delete 0, find 0/0 [ 346.299966] vhci_hcd: invalid port number 222 [ 346.301329] Free swap = 0kB [ 346.305929] vhci_hcd: invalid port number 222 [ 346.308935] Total swap = 0kB [ 346.316531] 1965979 pages RAM [ 346.319656] 0 pages HighMem/MovableOnly [ 346.323739] 281923 pages reserved [ 346.327213] 0 pages cma reserved [ 346.330604] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz-executor0,pid=10987,uid=0 [ 346.344886] Out of memory: Kill process 10987 (syz-executor0) score 1005 or sacrifice child [ 346.347190] vhci_hcd: invalid port number 222 [ 346.353623] Killed process 10987 (syz-executor0) total-vm:70400kB, anon-rss:2192kB, file-rss:33732kB, shmem-rss:0kB [ 346.364186] oom_reaper: reaped process 10987 (syz-executor0), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB [ 346.369244] vhci_hcd: invalid port number 222 02:25:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r2) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000002c0)={'raw\x00'}, &(0x7f00000001c0)=0x54) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in6=@ipv4={[], [], @loopback}}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) [ 346.473286] IPVS: ftp: loaded support on port[0] = 21 02:25:14 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd, 0x9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x80323, 0xc7de}) r1 = getuid() r2 = getgid() write$FUSE_ATTR(r0, &(0x7f0000000040)={0x78, 0x0, 0x2, {0x83f, 0x7, 0x0, {0x3, 0x9, 0x10000, 0x20, 0x5, 0x8, 0x6, 0x3, 0x8, 0x4, 0x5, r1, r2, 0x7f, 0x9}}}, 0x78) [ 346.744854] vhci_hcd: invalid port number 222 [ 346.749577] vhci_hcd: invalid port number 222 02:25:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0xfffffffffffffffd, &(0x7f0000004000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000040)=0x7) 02:25:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0xf6) read(r3, &(0x7f0000000240)=""/42, 0x124) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10002) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000280)=0x208) 02:25:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4b1, "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", 0x24, 0x4603, 0x9, 0xfffffffffffffffc, 0x81, 0x7fffffff, 0x80}, r4}}, 0x128) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)="ed0a9d2e23e226470f9a29c4e11ae47c74426228b8f4e3a34a4abe02f14ff1ae5ea775a0052a70a87d4a398b4394698a736de5684faf62b2915910f772f3d2c29f4396b908e139ddf3cc40d0b18367b950cc160bd13ed86b", 0x58, 0xc000, &(0x7f00000000c0)={0xa, 0x4e23, 0x2ac, @ipv4={[], [], @rand_addr=0xaa}, 0x65}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x80000000) 02:25:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)) chmod(&(0x7f0000000040)='./control\x00', 0x0) rmdir(&(0x7f0000000240)='./control\x00') 02:25:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x68, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x1, @rand_addr="208bcbb1f8c19d9d9d1930f15a945e82", 0x9}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x3, @empty, 0x163}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x7}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(r3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0xf6) read(r3, &(0x7f0000000240)=""/42, 0x124) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10002) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000280)=0x208) 02:25:15 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x2) 02:25:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0xf6) read(r3, &(0x7f0000000240)=""/42, 0x124) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10002) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000280)=0x208) 02:25:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:15 executing program 2: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7fffffe}, 0xfffffffffffffde8, &(0x7f0000000440)={&(0x7f0000000240)={0xfffffffffffffd14, r2, 0x309, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) ioctl$KIOCSOUND(r1, 0x4b2f, 0x6) renameat(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000480)='./file0\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x33aa000000000}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={r3, 0x1, 0x5, 0x4}, &(0x7f0000000600)=0x10) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r4, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'rmd320\x00'}, &(0x7f0000000240)}) 02:25:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0xf6) read(r3, &(0x7f0000000240)=""/42, 0x124) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10002) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000000280)=0x208) 02:25:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9e8, 0x80) renameat2(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x4) unshare(0x24020400) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0xf6) read(r3, &(0x7f0000000240)=""/42, 0x124) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10002) 02:25:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xfff7ffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0xf6) read(r3, &(0x7f0000000240)=""/42, 0x124) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x2) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000000c0)='syz0\x00') 02:25:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[], 0xf6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) clock_getres(0x7, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:17 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x2f, 0x4, 0xa, 0xe, 0x0, 0xb047, 0x8, 0x157, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x482482, 0x0) write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x0, 0x2, 0x2}, 0x3}}, 0x18) mq_notify(r1, &(0x7f00000002c0)={0x0, 0x2a, 0x1, @thr={&(0x7f0000000180)="85ff93589103b0d4236d", &(0x7f00000001c0)="afa85e5ed236f9de9e5d02a4be3c5e4fe95863c9c24f67d3b99c9d4fdec63f5883c9423920a492ca85073dd957a5ea08ad328e264bb174c54d1252b618b07219dd3443fd993293fda7f95ba7e5ec63e025be6a76b5da2b9727cd6641fb0ff4ba2f03f7f1d9d44a768e101062d71b11b68c2f99abdae0d078a9ff86b67106b78e0dbcfb2deef2dc4d08ab605eb34227ec606bddc2b1324ca5d157bc838d3fa2c0d1e077b4f2358cd71c324ebbc1cfabc7845ca8a8b982f51f0744d211b60076b994e46602c50495a7e85687facc5c0691"}}) r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x4, 0x200) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f0000000340)="1b967d9cef53eb65bdd48393b972c23905f48815ff6040a1fb37db4b4e51c8293aa43094d6da4f38e2bf9fc6ec913dc6951a9540da582efafde5622160510e82fd5b920b82366f76f9b5957de42c07529f03d43af80839ea50d657c1cbbeb3c13d0771fcd78b63ca7f65d3aae31d951b609e2a0dabdf003a9f2adf06e37967cbd4cb08ce5f883630697f2845c1ddbb5ac366d0688d994932aaa6075d3034c2cfffd2c88cd1436ed45de19a4640cadcdebc2bb1ca97d4") recvfrom$rxrpc(r1, &(0x7f0000000400)=""/107, 0x6b, 0x40, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f00000004c0)) write(r3, &(0x7f0000000500)="10d7cac65fd6d358a1483393ff2d4a874c293f0e8d646aa5557b7769b4b248d91b1ab17df257e982bf4a7262cabf99997dcba87679a85b356a14f78f87244f0ced94b612109967b4045e23e5ea6f2dd74b27168bec4c1e75738193a13e160bb0d76204a134a430b00bab27b533116bd906b75a61858cefe72df1661b874cb48e64457e08cc42e1d90896", 0x8a) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x11) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000640)={0x0, 0x1}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000006c0)={r4, 0xe, 0x2, [0x1000, 0x6]}, &(0x7f0000000700)=0xc) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000740)={'broute\x00'}, &(0x7f00000007c0)=0x78) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) keyctl$join(0x1, &(0x7f0000000800)={'syz', 0x1}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000840)={r5, 0x8, "88230d79c9d3fbbf"}, &(0x7f0000000880)=0x10) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000008c0)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1060000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, r6, 0x600, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000ac0)={r4, @in6={{0xa, 0x4e23, 0xfff, @remote, 0xf449}}, 0x7, 0x8, 0xfffffffffffffbff, 0x4f, 0x4}, &(0x7f0000000b80)=0x98) unshare(0x10000000) signalfd(r0, &(0x7f0000000bc0)={0x5}, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000c00)={0x2, 'ip_vti0\x00', 0x3}, 0x18) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000c40)={0x1, 0x0, [{}]}) 02:25:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:17 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'ip6erspan0\x00'}, 0x18) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x5}, 0x8) 02:25:17 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) unshare(0x24020400) r0 = syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x8000b, 0x80001) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="020027bd7000fedbdf2503000000cbdeac286e5574bb2bad0800030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8800) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200041, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000280), &(0x7f0000000400)=0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000140)=""/127) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x200100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000000c0)={{0x100000001, 0x7}, {0x0, 0x4}, 0x1, 0x0, 0xf45d}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:18 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x2) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xd, 'w'}], 0x18}}], 0x1, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x10000, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000200)={0xa7, "021ec5fb44f586ff952b3e76fe2ba2af95a0bf3c90f047187a1fd1102846b7d3", 0x7, 0xa3, 0x100000000, 0x7, 0x4, 0x0, 0x8, 0x4000}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r3, 0xa1, "bfd6baf196726a146c3a9b8b17eb8b4b591f020b670825c48269a209302b031b8324c680e853af0e55e0abe2bd4b812b724d15d46becdb3ab4e8eab0a85a0a4359d88050b2a6eac8309fd968133371e216301e0b6710708fad09be18a4c4fb31d1c915cc77b024dc121f4480468753e7953eae3e67897ff8cab2df3da1cefbda8ddb0b013930be72fb3238af5f3df4991b23a02026c4971f646249ef58fbcd61c5"}, &(0x7f0000000180)=0xa9) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 02:25:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 02:25:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) unshare(0x24020400) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x3, 'ip_vti0\x00'}, 0x18) [ 350.672532] IPVS: ftp: loaded support on port[0] = 21 02:25:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:18 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@abs={0x1}, 0x6e) [ 351.224729] chnl_net:caif_netlink_parms(): no params data found [ 351.382349] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.388911] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.397574] device bridge_slave_0 entered promiscuous mode [ 351.407104] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.413748] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.422708] device bridge_slave_1 entered promiscuous mode [ 351.460051] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 351.472190] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 351.523000] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 351.531903] team0: Port device team_slave_0 added [ 351.553699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 351.562577] team0: Port device team_slave_1 added [ 351.569078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 351.593551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 351.720356] device hsr_slave_0 entered promiscuous mode [ 351.769552] device hsr_slave_1 entered promiscuous mode [ 351.913294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 351.920939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 351.955747] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.962342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.969539] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.976190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.092589] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.112451] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.146511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.162164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 352.177182] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 352.184159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.192213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.210402] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 352.216662] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.233363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 352.240626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.249897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.258773] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.265322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.286203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 352.301998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 352.318395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 352.326272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.335725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.344999] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.351531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.359410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.369268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.404206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 352.411215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.421258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.438634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 352.453031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.461263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.470504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.484884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 352.500752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 352.511165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.521033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.533304] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 352.540216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.549059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.558027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.566988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.585071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.602853] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 352.624944] 8021q: adding VLAN 0 to HW filter on device batadv0 02:25:20 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 02:25:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x890, 0x200000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1908000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="7000000a22a29b83fc42a3bc4fa2c588c85462b71ab794af384ac41b8ffd765a3e89cc9d756e80ccd545b415ee10dbecc244b7807418c8d5d1c36c3d34e52caf701d60fe592aed87adc3008929fe096456714329242d3b40ccb17db129561db44f2202272146e31b97ebd8404b42b0cc27f260c27a5636b7b59578e8f4fc94464e9608f383a898416eb2682338b9", @ANYRES16=r4, @ANYBLOB="04002dbd7000fedbdf250f00000008000500020000000c00030008000500e00000014800030014000200767863616e310000000000000000000014000600f5fa1f0e5593d34fbfc73d91298c5c1814000600fe8000000000000000000000000000aa08000500e0000001"], 0x70}}, 0x24048055) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000002ca741e551e16cda14094aa70aebb79c738735793da9b91613f9a13f3edfed3745a782356c4126522bfbbe8bcce9e53e141b77328bef5e1c1fe4f9478f68b5cf230889306027a370ad4890f5ec3bf2c73e278a32e5679f462c37b872226f7535128084c0bad3481d2ffa904b86ace289896bd", @ANYRES16=r5, @ANYBLOB="00062bbd7000fedbdf25120000003c000900080002008700000008000100c70b000008000100ff0700000800020060010000080001000400000008000100000200000800010006000000600004000c000700080001000f0000000c00010073797a30000000001400010062726f6164636173742d6c696e6b000024000700080001001f00000008000400000000000800030000000100080001001c0000000c00070008000300000000003c00020008000200ff030000040004000800020008000000080002000000000004000400080002000900000008000100ffffffff0800010005000000"], 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000500)=ANY=[@ANYBLOB="040000000000000000000000000000000000000000000000000000000000000000000000000000000000ea0000000000000000000000000000000000000000000000000002000000"]) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/udmabuf\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000001c0)={0x0, {0x3, 0x7}}) 02:25:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) recvmmsg(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'irlan0\x00', {0x2, 0x4e22, @local}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) dup3(r2, r0, 0x0) 02:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x1000000000000053, 0xfffffffbbfffffff, 0x6, 0xfffffffffffffffe, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:21 executing program 3: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x40) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xff48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) socket$pptp(0x18, 0x1, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) 02:25:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="1bbc60a045e1c2684bb2cdef05c8d1ac15a3b4bf8a0556db24bb5f49fe6aced7a89da2959692cb47bdab61854d1e4e54a2078f7dd249354e82d682991c18f5599d1cc98184d5a9bec9d9cf2e9849424278a4699184a071d0b2882e74f9394c7d1407", 0x62}, {&(0x7f0000000300)="7424f4179d69eb434414ad", 0xb}], 0x2, &(0x7f0000000240)="1e621a2822c03b391366317e604c5948181b250919d1ccbe8400a7991f63bc9503a19def603c383091986a6a376b4a7e5fc06eca4802486c6c3304a1821b8199037ee5ac1ec5d6d0645d892061459a4bb2d525b49f4267338ae3d9f19a2d18dad7c5ea4eb5c2eb384da612c5cd2047000758fd568b2e4d0735663bf853bfc56a34b4f051ba30af28", 0x88, 0x40}, 0x44000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x34004}, 0xe, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0xf0fffffffffffe}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000003c0), 0x1000) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0xb4, 0x1}]}, 0xc, 0x1) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0xffffffffffff1da1, &(0x7f0000000100)=0x4) 02:25:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x401fffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UI_DEV_CREATE(r2, 0x5501) truncate(&(0x7f0000000140)='./file0\x00', 0x9) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x20200, 0x0) close(r2) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRESHEX=r5, @ANYBLOB="6e3eaf69a522d89336666f36230c86ca9b87c3c672717845fc027e2bf4c0450d85749b2d1ad1d2d16636153b429351ab625af2c82d5fd8d33b4a4b945ef45393725cff0709efdce35f62fbd52b69bf0032a35abafc61450725d9ea94345097b1f5533732d7c2ce465ed39e8f46987878f866434557249f51f07e35ff2fd25ccbb6f10f9ce7f1acbf5a6c725ffe0f75296ff8e63497f45c84cc4018f50f9a15db11cb6ab9ec8b40ead36a658ac8d9e80c376567d88dee59000b2c3d8ac12007db1eaebc2010295c591f87", @ANYBLOB="aad9a4afe8c61b23a5b4ac5e74645b9146e25fcfaa1417e6f20dfe1d4d4f69d6bb96b521258a6e90936b4a4a407c9223eee1fcc0affc0056fd95c7622adc37e0f3684c5eef050b2056b7468dcd1a9d90e960172c8f3aec3bdd047c6ffd5ba978e68b791ed8bcf2fd96cf152efc37d1997a76fd964074cd446fd968e2b13e7ef2ee59cd64c78514746c483ea2c5da990a8939efff59cd53e74bf34b5fd09e39eaeeac7977f7bddb09bc9899ee0b9736906de5015a74a3ed327a58b1d80fc315822d", @ANYRES16=r3, @ANYRESHEX=r5, @ANYRES16=r4], 0x9, 0xfffffffffffffffe) 02:25:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x800, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x32, @local, 0x4e22, 0x3, 'sh\x00', 0x14, 0x50d, 0x17}, {@multicast1, 0x4e23, 0x4, 0xc6e, 0xaa, 0x7ff}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x1) write(r2, &(0x7f0000000040)="220000002000070700be0000090007010200001e00003c0000fb0404050016008000", 0x22) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000340), 0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 02:25:21 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x7) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x10000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x141000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000002c0)) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) sendfile(r0, r3, &(0x7f0000d83ff8), 0x2) sendfile(r1, r3, &(0x7f0000000000), 0x10000) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000040)=""/21, &(0x7f0000000080)=0x15) 02:25:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80002, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000000c0)=0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:22 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@getsa={0x150, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in6=@empty, 0x4d3, 0xa, 0x33}, [@lifetime_val={0x24, 0x9, {0x101, 0x8001, 0x80000001}}, @replay_thresh={0x8, 0xb, 0x70127bcf}, @offload={0xc, 0x1c, {r1}}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@loopback, 0x0, 0xa}}, @tmpl={0xc4, 0x5, [{{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in6=@remote, 0x3501, 0x1, 0x3, 0x100000000, 0x1, 0x6, 0x8}, {{@in=@multicast2, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x80000000, 0x3502, 0x4, 0x3, 0x8, 0x20, 0x9, 0xfff}, {{@in6=@local, 0x4d6, 0x6c}, 0xa, @in6=@mcast2, 0x3507, 0x2, 0x3, 0x9a3f, 0x3ff, 0xfffffffffffffff8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8844}, 0x4040004) r2 = socket$inet(0x10, 0x3, 0x8) r3 = socket(0x1f, 0x67390ebf1cb67756, 0xfffffffffffffff7) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0x1000}, 0x4) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="24000000010507031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:25:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x50a0, 0x402) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x3, r3}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:22 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000140)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x3f1488f4, 0xfffffffffffffffb, 0x8, 0x100000001, 0x1ff}, 0x14) uselib(&(0x7f0000000100)='./file0\x00') preadv(r0, &(0x7f00000017c0), 0x23f, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 02:25:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="be9b9215084bc29ad5489e05bec5498d761d94d638fd59706fc66997861fa68ffdd41d192aa0a54e820986a264efe54d489f41a45695ae4507e42d4cffeac9"], 0x3f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x81]}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400000, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000180)=0x7, 0x4) 02:25:23 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2fe06260643b89e63e77cf000000973db3f5bac2b156620a7c"], 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@local, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) sendto$packet(r1, &(0x7f00000000c0)="9d9bb74fd934bb436894ebebaebb556fa60d7bd7d6dbef9b4dad93931797404199985a688029e0aa9731907397681b417121690b057ea6c73f53491850516977a39fd1eed5cef42b63e368021ef1ceca491901c5995c5775e55378e6421742159d23be98db0394024e70d0fbbf75d33276c602e43f25f67f36376d76e68e0a9847764167a7eabb94fc8b6e8f51695cc1e561f6bf5f84ca6f2488583146d2ca8b30de08b9bd46bd39a3557916f5c0ee3bfabac4ade53c813a89648919fa7c5035bc8d3c802d5c8d0447e6b112a4c5ee9206dec446704853b055c82cfe93ec8a60ac14192557f0998d0e53", 0xea, 0x40, &(0x7f0000000240)={0x11, 0x17, r2, 0x1, 0x9}, 0x14) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x3ff, 0x4, 0x9}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, &(0x7f0000000000)={'\x02\x00\x81\x00\x7f\x00\x1e\x00 \x00\x8c\xa7\xcc\x99\x175'}) 02:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80200000006, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x400100000000026, 0xa, 0x0, "1760550f540400f0eb0300ef1e20000400000000000000000000da00"}) 02:25:23 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x0, {0x77359400}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, "58244c9a"}, 0x4, 0x0, @userptr, 0x4}) 02:25:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x10001, 0x9}}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000200)={0x0, 0xc, 0x1, @thr={&(0x7f00000000c0)="69b2838510f2624b107044ed749d33d9572d3187abb590b0f716cb066f1dd1a789bd9abc98f3c2661d0a460b7b579429", &(0x7f0000000340)="49572226e934c537e3ff3ff453499bc91fe8443ad208d6b98eaa213c89378ebf07ebf84517e0cdc80a9bc14a9b10c3cf5521d756f205dd5a54133e1c9b937f327b01e4c48137b1b4dac61adf7889635059f5ccfc3466f212a7dbd393cf22ea022e8f30719fa24449acdd3366820e2b8cebded86607f9cbc66c55ab6f0115449d51ba796d4c283825155db182f2fe0fbfe7199e564043a4b3cecc476d30bce903816375d5021b8f536c0607635b28177113557c07052bb64a0016db98d8ae413e4ff497c67674311146278ef4f9cbb673f93a32"}}, &(0x7f0000000240)=0x0) timer_delete(r4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_getnetconf={0x1c, 0x52, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100000001}]}, 0x1c}}, 0xfffffffffffffffe) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x337, 0x0, 0x0, {{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb2}}, 0xb8}, 0x8}, 0x0) 02:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close(r1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000180)={{0x6, 0x0, 0x0, 0x10000, 'syz0\x00', 0x4}, 0x3, 0x0, 0xffff, r4, 0x4, 0x9, 'syz0\x00', &(0x7f0000000100)=['/dev/udmabuf\x00', '/dev/kvm\x00', 'userem0$keyring&@!-bdev\xb88\x00', '\xda)+vmnet0GPL\x00'], 0x3d, [], [0x3ff, 0x81, 0x3f, 0x8]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x6, 0x204000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000004c0)=r1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f00000006c0)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3fc) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000400)={0x0, @bt={0x81, 0x8, 0x0, 0x3, 0x10000, 0xb8e0, 0x10001, 0x10000, 0xffff, 0xa41, 0x4, 0x7990, 0x4, 0x1, 0xa, 0x20}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) 02:25:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x80000) mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x200000a, 0x1e, r1, 0x180000000) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.sched_relax_domain_leve\xec\x00', 0x2, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x2480, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xd5b, 0x10200) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="5afe7a306c155ec9dd059959d2f7461a89ba58a1", @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="4dccc49561115de5dc822feaf1169a4cee047455bcd0c31101589572280bab0a18276ba40b879236586de6ff1016570f793208290caf4ae83d69930ef020465d528ff9cf155209b4f12fca6f5acb1f35f9ef11cf5e5ea6a05f952e5c84cb1f067eefd4331e82fdf7a90840d4d73c4b1f758f5ec288982e8a7f4e5fc933b8564151e0dbd382f153030ec81da67d78c6cfaed36412eefd6005778593e01a6da2cb71943bc34bc2cab97c266f"], @ANYRES64=r3], @ANYRES64=r2, @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="b6e49a45160c16718f6df8c8dc22eca8ef342f1620f6f235fc8a33603f51c34a217944e76ad026c07559f001ac2cfed0b4c5a41e92dbecdbf7e212d73e93ca0559c3b9ec6e6c0eded2775f96ffae16d11723b56d1fc4f2435d4698ebaf3f0cb12d1cb4f846118338b7f169afe9fda65405a345ca8462bb3aebc97048a2ce7990a424e736d958f81bddaf8984c8281d7912b394abe652b777a8e5f953294e2928f852d83acd5630d5516abe332f9c85c0958ad2625c51f0d8a8d1a993c61bc372c8a470014c3e84204b5d954045f7328b3e67c76c609ccb305985c6982256a4208d99eb817dc3a8dc910bb159d45b1717827cc26c"]], 0x6a) 02:25:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x401, 0x0, 0x53a, 0xc27}, {0x0, 0x5, 0x8188, 0x2804}]}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x10100, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}]}) 02:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000040001000080000000000700000000000000000000000000000000000000000000000000000000000000"]) 02:25:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000080)='.\x00') 02:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:24 executing program 1: getpeername(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000480)=0x80) connect$caif(r0, &(0x7f00000004c0)=@util={0x25, "e78d170da58581c09f4202dc504512a8"}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x24020400) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000340)={0x6, 0x208, 0x7, 0x100000000, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000003c0)={r4, 0x7}, 0x8) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000300)) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r6, 0x95) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000140)={0x0, 0x0, @ioapic}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:24 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x1000000000000001) ioctl$int_in(r0, 0x802000c0045002, &(0x7f0000000180)=0x1f3d) 02:25:24 executing program 3: r0 = socket$inet(0x2, 0x4, 0x101) listen(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, 0x0, 0x0) 02:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x7ffff000}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x5}}], 0x1, 0x0, 0x0) unshare(0x24020400) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x8b, "2c9d9a15cfc26d1dd980afbd3ec4e7ec19472664d0c491d9fd8f72ebe94f698d074ca133ca87bc7a3186d9feb478d8eea5cdd9bd4d49a3c4ee15fb9d9aef3a891c9b46f5a409b737b2a761b6fd9233f9cba6938ed1ab041d889f3bc19228c4bd9045224d46b5ee510002bb7adf0c4effe38c27d4bae118a961aaca769899a9d90a466c93e1709a3c85e3f8"}, &(0x7f0000000140)=0x93) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x6}, 0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000200)={'bridge_slave_1\x00', @ifru_flags}) 02:25:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x1}}, 0x0) 02:25:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:25 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, 0x0}, 0x8000) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="2e0000000000000800000000010000d5", 0xfffffd1c}]}, 0x0) 02:25:25 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:25 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9) [ 357.181489] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 02:25:25 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f00000001c0)=[@increfs, @decrefs], 0x0, 0x0, &(0x7f0000000140)}) 02:25:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:25 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) socket(0x0, 0x0, 0x0) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) getresgid(&(0x7f0000003600), &(0x7f0000000fc0), &(0x7f0000001000)) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) [ 357.549305] binder: BINDER_SET_CONTEXT_MGR already set [ 357.554903] binder: 11639:11644 ioctl 40046207 0 returned -16 02:25:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:25 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x402000, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x4012, r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000100)=0x8) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x2aaaaaaaaaaaab5e}) 02:25:25 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff92}, {0x0, 0xffff}}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x1, 0xffffffff80000001, 0x8}]}) r1 = msgget(0x3, 0x4) msgsnd(r1, &(0x7f0000000080)={0x3, "17c3c6a54014044feebda21c91744b9befa0ae6b7c32133425956593b80163db69d7ed3398417f5639"}, 0x31, 0x800) 02:25:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000400)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x2, 0x181102) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000000280)={r6, r1, 0x1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x8, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000440)={0x401, {{0xa, 0x4e21, 0x29c, @loopback, 0x10001}}}, 0x88) clock_gettime(0x7, &(0x7f0000000100)) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000040)={0x9, 0x101}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000002c0)={0x9, @capture={0x1000, 0x1, {0x3f, 0x4230000}, 0x2, 0x1}}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:26 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x200, 0x2000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x4, 0x30}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000540)={r1, 0x3ff, 0xbe4, 0x7, 0x2b5458, 0x100000000}, &(0x7f00000006c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) r5 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'L-', 0x1}, 0x28, 0x3) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000200)={0x7fffffff, 0x5, 0x2000}, 0x4) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x38}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x2, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x5add41657c8929c0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000240)=@fragment={0x0, 0x0, 0x3, 0x742, 0x0, 0xffffffffffff0001, 0x67}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000300)={0x8, 0x1, {0x3, 0x1, 0x6, 0x3, 0x7}}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000580)={0x0, 0x1, 0x7, 0x8, 0x3, 0xcde}, &(0x7f00000005c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000780)={r2, 0x80}, 0x8) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) sendmsg$alg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="826402dd2d81cc877ac2811233e3c5543918ad79da8b69a3f28ace2a8f9e53722281499e8d0865fcbd4014488fbcdfef046938712668820c8358", 0x3a}], 0x1, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x800) close(r4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000600)=""/165, &(0x7f0000000440)=0xa5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000380)={{0x0, 0x1}, 'port1\x00', 0x83, 0x40810, 0x5, 0x1, 0x1, 0x8001, 0x7878, 0x0, 0x0, 0x23c78a3e}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r7, 0x800443d2, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {}]}) 02:25:26 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x4081, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0xb7, "66facce07a3cd86346b77d0f94b0a058bc2f8fca763831ce8ca20310e9e839e0be3a50fd306323daf26dd405e470b41a792547ae87c23931fcbac871b2244adaf11fd0c8cb54af42558dec5e940b0e2f5482163ba8faaa19d8e4a02bbd6bc02898aeaef8dbf98a695bffdf02c766cef7e6cc8355c38521932869dfcaa88e36773cee551c2a9785da82492b9197aa9cbfb781d21c2298e214477e7bd2e18a8eacea06c4c4a446a6c056ba165e97f920d90fbdb27caf079f"}, &(0x7f0000000400)=0xbf) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}, &(0x7f0000000500)=0x84) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) renameat2(r2, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000280)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x3, 0xf60, 0xffffffffffffff00}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x6f77}, &(0x7f00000002c0)=0x8) 02:25:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:26 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x4000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001640)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002fc0)=0x0) stat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000003240)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x1448}, 0xc, &(0x7f0000002f40)=[{&(0x7f0000000300)={0x1318, 0x41, 0x200, 0x70bd26, 0x25dfdbfc, "", [@nested={0x184, 0x1b, [@generic="63270654faa0eb339221ecf8aeb7a563b686a19be3ee44bb5dfbb73dc2bf99bf8e28ae41d304315be19c02f4fbe6e44a01de16af4d08f6326946bd9ae762eb9c08fa6968bd2e776b55c195ef569665a7e0b1163d66645d4676adeb704bb77b49907cd6785b6c7a72891475207c79defca234d7744a2136f31ffd1984473e16aca0e19bd6f93242928dc5e6ea8e1c0a592a38c7d02dd7b7692cc19134a621b7bd0630", @typed={0x8, 0x80, @pid=r4}, @typed={0x8, 0x83, @uid=r5}, @generic="12ef51376d386552608d3db0409263a1ca2504dff4d13b3828a2606030c6c207e1d25a40c82b29d5ffc0549f61171c6b02bc8c88d6594052c831cf27222428364a8a861bf90668425f9deac7f722ebda77354e5eff0064473a659162e666f9e70a0919407015039f4b247906a4a5ed0e069245bab3ab62e1b02b7b1bee1294bf7441fdf65ef2a4927b677f329a374ad07b7c3eaacfcf14d0b5a410153a1859d1314c5b1d9f8bc5dcc2f8173f10aa572643e43b38c0fb6e99afc46e8986b7a0af2352b30927b39bc12c", @typed={0x4, 0x8d}]}, @nested={0x1088, 0x79, [@typed={0x18, 0x4, @binary="cab6cb1fe2a3fe1dfe516a3f1ac900b2b5601b"}, @generic="b01970b4848da6df9bc39e1286768fd044e5d1dbc51a226b172431845700e81db729bcfdffcde0f8eaa55267ff3b3cb4f98403f949738d705d5c07a08abbecb7a0d35e46ba38f24c499d28fabf5ce2fe", @typed={0x14, 0x93, @ipv6=@loopback}, @generic="88a8fa7e6edf8a9d", @generic="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"]}, @generic="40f99f235e81bb1ef3e60d4cd57073aa8bc203f58f718235ec3f9a1c803ee1b166aeb107175b8a6087e43473887e54a83c5483801d276825c4bed8fb0e7e4eca09a45c9aaee55baa05a8e92da0b8d93e29a589b0e4b05ec19559b766615bb57b67153a2a9e3f833eb861deabeeb5c2a4cca870057d35aa13a909b0430ad560c931f8517c7f0bdee35abae9fecb7eefaaa11fb6a444b015d6ae9e7fff7971e79d88f84db789b8c21d3fdc3c5c74b50bb44f5e9b9b96dbefe01c5e2296324f9f09eb4d81a947c1a7dea80e58bdba1c4b5c742b8e3260992589745cd6eeeb71f03d3262f0d7dce02b5e26b037d9c3a140a27b1d04bada7622c6b1"]}, 0x1318}, {&(0x7f0000001740)={0x208, 0x26, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x1f8, 0x2b, [@generic="a48a79edd79dd0a9de0219aa2b14416dd494e66c256e", @typed={0x8, 0x29, @uid=r6}, @generic="77b075a050ac99e769302b3849ea37c864289b18a8abc787766a4e03ee6a7d42b6e2fddd9fd19242b17800da6fa1a079763fe0c4bc72ad474b4b146063159227e61d8b407216eef8f6e3507e300010f223295e8e1fc7cda18c623a2767388c8ab85a436f616935d143420426d9e9213e227f8093035dbd354d3c7d3a931aaa489d7b85a7877999c4d1e59be4530123f07001c28b787bcc19c04a3bec188a9875fbbbe5464c8176ceae480b01101aa34864131c1a68e75f612dedf50cdcff3816ccd5c39b4191ef8fda8c9bafb9e6afc9919c8bcc65d1", @generic="cbb7793810b701055bacc286d36f8eddfdecf4f8d2bc157f16c1b00071bc0780d386521b006072e7c0873d33b2333d053679c630c821164a213b38a3463c0b6a9f1d6ad2656a75a9158f4ac9b0c32211d6f1323861f2fc975e1f52601fefb9aad63dbfb26bb01ec741488520572093a2f650bd4991b64b00254731c923fa9f57b878aa3597626ca89f9074c949650c24cb1a9b061227424c5c26ece067e76b7c56ec0ed61df4f69febb079e480dcc9143196372492e52937481ca55d2cbe4adaa7943964527a95d80d89bbd9300485dcde8a182874fe4d81b00b43e1e71851be8f646923a74cf3e86dff699b122f21080b9604", @typed={0xc, 0x26, @str='syz_tun\x00'}]}]}, 0x208}, {&(0x7f0000001980)={0x504, 0x2a, 0x400, 0x70bd2d, 0x25dfdbff, "", [@generic="e5b1a3af6fbd518d41b9b6a3fbcfae66894592b0efa7395a8e5716392bde671da8f78314a4a6b8d86af9079dd947baeac7845777ba3b7b436c8f5341a38b378457097efc607f9ad7357da3580ea042a0cf793ac61312ecd977640bd5d759dba038198319cc09ef682dfb76c598dd620a64cf82f0c1946d5fc69444b8392090d1dc7672ce09068355de244a3ac6be72a998e47d305baf76976a367faf6deb92c728142991f94db7b9cc47c3888fbb", @generic="2d2a25c53a75459ebf379ba982a6d191e71606f150b5feb7a8c4206dac16b95b94c2b53e5345e56e72680003c759477d5d85462a1e10e258d0e6d0d268c338c36f4f4853f9a99842217c5b47698a566e5dae3e0af24887cf1427ee234b3e0f5c2dbca4bf8a6199f255d5d10ce32f0f93773b9f8deedf4f27641ab27abccef7f8359232ce8b55816a0784d402ab7a01de933bd1afcaf27d49c83b16c877fac66255f672f4323cb0574b3e53597f5c4a21a2008de214", @nested={0x148, 0x6c, [@generic="6f92494a942b05b24e36af68df1a6d7504ecedc227fee309db238e82eae3b3e2b268a4076bf880ed3d439c9be6ad2c546e213ce3c660945eac7f04cfc40b266a1e65e6db8b0302baf18ff451b2b6ec7d6da6d45b5c9ce1ed3d4fab64f3e8b3f55c02b20c0478f74b14ceb100d4948235b280d18b5b473c855923e1e583a3235caef3bd6bbc04391aa0ec8c2efe270e126b0489ada6743e714faa3734776e0f324ce8c6667f", @typed={0xc, 0x90, @str='syz_tun\x00'}, @generic="26c867d6548260543f6d1e1250189f0d3f0427a934b150ae09dceeae57ab5b368bb7765d753b39d773913f598d743085a482c09e4cbff19f06de0925e0770504663045c07d690eef3a2307e5e58fb353ef351b6e00b6d771162770a63510288437f0026d96ffbaec10f722c9e1f2cd7ba7283e6a6b725d1dc71ab96e3bbd60aec824a1422efd9195523cdd867ca68f3535"]}, @nested={0x14, 0x4a, [@typed={0x8, 0x57, @fd=r2}, @typed={0x8, 0x90, @u32=0x3ff}]}, @nested={0x234, 0x4e, [@typed={0x4, 0x9}, @typed={0xc, 0x3f, @u64=0x8000}, @typed={0x14, 0x32, @ipv6=@rand_addr="7c477b24dc3c3d91c9c422eb12fea8eb"}, @typed={0x8, 0x29, @fd=r0}, @generic="3ecca08d17e6c4c02491a1cf7a0d4d44c7ea615806c6668fae9ee6375e1409010597208171a02672c7fba48984600fa096b7951fdc1b95c7ea226e9096cb476e61e6e0c2521c19820d34a9c4f091dfb2d23fdffb1d5317795cca52e0de156a9564d089ecd3f5679e6aa35b53c34583d79d848eefbb7124a8742d9e2a721bbbb333ad73e53f1580d091b3d3a2fb60529a7a3ce4efd29928a81fa61c1749c22f6110e4b38adfeac40a", @generic="81c61bd0a58035e01f06ec22321fa8ed219067acc63e9ac07773b0a8a677920c3276b11047936031ea7b1c9fd29b87efc6a3e196515ef1", @generic="d89eb6e99d6c1b790f2531c20fd27a2ffe67a14ae312ed266004d94f4e545047a28f3e5cf9fb5fdf9014c9bc0d7ea061ab69fa72a4622c2bc149d29eebcc46dcaaeac33ea15c51f4624e23a2f1244f8099ae39ddcb", @typed={0xd0, 0x3a, @binary="964a2bc814d3e9d51087624fef8151b0cdb6abe76e9f5b722bc6e66112277f4c1a30a330186a0a5707884a1ce613d965da824d13faa02e12ca21babf1174f7202e14fe98d8f9d221eb11687ba5d3b351ee65f5f8d6951903e8bbdebba8697608f7b87eb75b72965232b8c2e53981fbdafb8520d5333809288433b1d05f6c45d742d0ce14009a50165ffad31e235b62db31e2eb6507265b30d4b9df0dd829b26ec702994561d1bc3f9643b98fbbe0486684ba1ddea421cf5ce56c4023627837a42fec1923a1a94c7bb6e3"}]}]}, 0x504}, {&(0x7f0000001ec0)={0x1010, 0x13, 0x2, 0x70bd26, 0x25dfdbfb, "", [@generic="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"]}, 0x1010}, {&(0x7f0000002f00)={0x18, 0x15, 0x2, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0xc, @fd=r1}]}, 0x18}], 0x5, &(0x7f0000003180)=[@rights={0x28, 0x1, 0x1, [r2, r2, r0, r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}], 0x88, 0x44040}, 0x4004081) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local, 'syz_tun\x00'}}, 0x1e) bind$vsock_stream(r3, &(0x7f0000003280)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="2465c0e574ab", 'veth0_to_team\x00'}}, 0x1e) 02:25:26 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000700)='/dev/video1\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000680)={0x0, 0x2, 0x1f, 0x6}) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xbb49, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x14, 0x0, &(0x7f00000006c0)=[@register_looper, @request_death={0x400c630e, 0x2, 0x4}], 0x1e, 0x0, &(0x7f0000000840)="dd288fc79be1fb6f6c1f8742bed4de7e32b88683004b088c6cbac79d1af7"}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000740)=""/209) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2a0, 0x2a0, 0x140, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000000), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x1d}, 0xff, 0xffffff00, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x4, 0x6, 0x3, 0xfff, 0x7fff, 0x7fffffff, 'tunl0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x29}, @empty, @rand_addr=0xffffffffffffff1a, @multicast2, 0x3, 0xffffffff}}}, {{@arp={@multicast1, @local, 0xffffffff, 0x0, @empty, {[0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x81, 0x1, 0x3, 0x6, 0x9, 0xffff, 'gre0\x00', 'hsr0\x00', {}, {}, 0x0, 0x10}, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x73ed, 0x81, 0x0, 0x0, 0x0, "d8fcd2891615223b6b512928e53829a0722e24bf02256a01e41687ef3e0295c06ed37e0605cffebc705a8c9f1e7fc617f0de8e70da707f6d6292277dcfbfb9f7"}}}, {{@arp={@rand_addr, @local, 0x0, 0xffffffff, @empty, {[0x0, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x7, 0x0, 0x5, 0x8001, 0x7, 0x0, 'syzkaller0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x0, 0x180}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @loopback, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffffb3) 02:25:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000000000000) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x48, &(0x7f0000000280)={0x4, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x40002) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x8d9) sendto$inet6(r1, &(0x7f0000000040)="83aa5608e9458c345019c962b4835e0be5f9776f648eb810c9c97f803fd761c2714ad06fbe8a453b0ace", 0x2a, 0x1, &(0x7f0000000080)={0xa, 0x4e22, 0x9c6, @mcast1, 0x94f9344}, 0x1c) 02:25:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="2c000000d6192d096951be598ec0638fe210032669ef5a16a238968953ab57c8e0280be7d98b9aab9f433a64ef96de3a301e9e30f51093"], &(0x7f00000000c0)=0x34) getsockopt$sock_buf(r0, 0x1, 0x28, &(0x7f0000000300)=""/197, &(0x7f00000002c0)=0xc5) 02:25:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x88000, 0x0) write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) prctl$PR_CAPBSET_READ(0x17, 0x1b) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5504, &(0x7f0000000080)) 02:25:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/.roup.stat\x00<#\xfbWKM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000240)={0x7b, 0x0, [0x1ff, 0x6d7d, 0x7e000, 0x3dac]}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0)) 02:25:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xbcabf6b94496a28e) 02:25:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:27 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f00000001c0)={0x200000, "343dc8ed835bc7b40ffa0e20c68988d477d3783d1000"}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000080)={0x401, "e6ca55ee73ced42ecb1260bf591a7fc0998b69a98abb7747d43b23be1c408de2", 0x8, 0x800, 0x2, 0x0, 0x5}) 02:25:27 executing program 3: r0 = memfd_create(&(0x7f0000000180)='#vmnet1\xfbodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = dup2(0xffffffffffffff9c, r0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9e2, 0x10040) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="5000000092669bf432c5b676dcdf8dff1ed803162267d70945ceab067b5dbafc482390b4e0c412c35f61bb9c33c4b6166b1be09b7e5495fb72d3d0a4c8b39b2affbfbfe5f2cf10759955bb678d9cd8"], &(0x7f0000000140)=0x58) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={r4, @in={{0x2, 0x4e24, @remote}}, [0x7fffffff, 0x5, 0x0, 0x1, 0x85f, 0x1, 0xd9, 0x9, 0x5, 0x7, 0x3ff, 0x4, 0xff, 0x8, 0xff]}, &(0x7f0000000400)=0x100) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0xffffffff00000001, 0x2c, &(0x7f0000000100)="38cb9b5fa79b2cb49e976345a1e6ca6d2890e2ce5ef35e4549a865117025780cda1d5ac597c7ff4c2d352e0c", 0x96, 0x2, 0xa2e3, 0x9, 0x800, 0x2, 0xffff, 'syz1\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r5, 0x65, 0x0, 0x0, &(0x7f0000000000)) 02:25:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) getpid() ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x5, 0x80) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000300)=""/108) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8001, 0x20400) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=0x0, &(0x7f00000003c0)=0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0x6, @mcast1, 0x1}}}, 0x84) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000280)={r4, 0x8, &(0x7f0000000180)=[0x6, 0xc1e2, 0x1, 0x12, 0x4, 0x26cbafe0, 0x94b, 0x7fffffff], &(0x7f00000001c0)=[0x8de, 0xfffffffeffffffff, 0x2, 0x2, 0xfffffffffffff000, 0x1, 0x10002, 0x3e6b, 0x1f, 0x1], 0x34, 0x1, 0x4, &(0x7f0000000200)=[0x4], &(0x7f0000000240)=[0x10000, 0x9, 0x101, 0x7, 0x3, 0x8]}) 02:25:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x90, 0x40000) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)) 02:25:27 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000001c0)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x7ff, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = inotify_init() r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000100)={0x3, {{0xa, 0x4e24, 0x5, @mcast2, 0x9b26}}}, 0x88) r4 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) inotify_rm_watch(r2, r4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 02:25:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000000c0)) getuid() 02:25:28 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd}) 02:25:28 executing program 2: io_setup(0x100000000, &(0x7f0000000080)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x1ffffffffffffe76, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80000000005, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 02:25:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:28 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000001280)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="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", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 02:25:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x10002, 0x0) sendto$inet6(r2, &(0x7f0000000240)="ce0dd48e9bd68a75f099f5fdb9d88954ab9d27e01d760608bd2a8569a699e5f17e6d100840b770d82bdcbedd6bc59e02f88ae3ccaf35167df21e9c5fefe57852a81389167515ffd68a8c69658b697f6271878466a22550add2d61334b63dc57c0d46018e8894f7461438756ef9faea7a", 0x70, 0x40000, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x27}, 0x8}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={r5, r6, r7}, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x914}]}) 02:25:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:28 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305710, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x8) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x0, 0x3}) 02:25:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:28 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) fcntl$addseals(r0, 0x409, 0x4) 02:25:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x20001, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000180)={0x3f0, 0x3136564e, 0x2, @stepwise={0x3, 0x4000000000000000, 0x10000, 0x0, 0x9, 0x6d7a0c5}}) 02:25:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 02:25:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7fff, 0x2400) write$P9_RLCREATE(r2, &(0x7f00000000c0)={0x18, 0xf, 0xf4, {{0x4, 0x2, 0x3}, 0x22}}, 0x18) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000140)={0x469, 0x0, 0x10001, 0x400}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x79}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'hsr0\x00', 0xfffffffffffffffd}) [ 361.173124] binder: 11807:11808 ioctl c0306201 0 returned -14 [ 361.202662] binder: BINDER_SET_CONTEXT_MGR already set [ 361.208036] binder: 11807:11808 ioctl 40046207 0 returned -16 [ 361.255548] binder: BINDER_SET_CONTEXT_MGR already set [ 361.257106] binder: 11807:11815 ioctl c0306201 0 returned -14 [ 361.260876] binder: 11807:11808 ioctl 40046207 0 returned -16 02:25:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8", 0x1}], 0x1}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x18003, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000240)=0x6) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x10e, 0x9, 0x1, 0x8, r3}, 0x2c) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.origin\x00') 02:25:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, 0xfffffffffffffffe) 02:25:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000000c0)={0xa, 0x1, 0x2, 0x1ff, '\x00', 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:29 executing program 3: capget(&(0x7f0000000140), 0x0) r0 = memfd_create(&(0x7f0000000600)='\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0xa3}, 0x2e2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) capset(&(0x7f0000000100), &(0x7f0000000180)) dup2(r0, r0) 02:25:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r0, r2, &(0x7f0000000100)=0xfffffffffffbfffc, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x84002, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x62, 0x1b, 0x9}) 02:25:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x6, 0x3, 0x6, 0x4}}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'team_slave_0\x00', 0x6}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000001c0)=']@lo\x00', &(0x7f0000000200)='/dev/kvm\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/dev/udmabuf\x00', &(0x7f00000002c0)='team_slave_0\x00', &(0x7f0000000300)='/dev/kvm\x00'], &(0x7f0000000480)=[&(0x7f0000000380)=',GPL\x00', &(0x7f00000003c0)='cgroupF\x00', &(0x7f0000000400)='ppp1\x00', &(0x7f0000000440)='/dev/rfkill\x00'], 0x800) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:30 executing program 3: syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xad, 0x20}], 0x1) 02:25:30 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000000040), &(0x7f00000032c0)) 02:25:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x2000c0884113, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0xc9e) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:30 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) 02:25:30 executing program 2: clone(0x4000000040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x10, &(0x7f0000000000)={0x0, 0x8000000000001}) process_vm_readv(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/80, 0x50}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/218, 0xda}, {0x0}], 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) close(r1) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x1c0, 0x423d, 0x4, 0x7, 0x2f4}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r3, 0x3, 0x3, [0x0, 0x3, 0x80000001]}, 0xe) 02:25:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10002, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x1000000024020400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3ff, 0x80) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0xfffffffffffffffc) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000001d0009000010000000000000"], 0xff0e}}, 0x0) 02:25:31 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x10400) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) rt_sigreturn() r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7ff, 0x80400) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x181800, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) syz_emit_ethernet(0x56, &(0x7f0000000180)={@random="31c73e024853", @broadcast, [], {@canfd={0xd, {{0x1, 0x80000000, 0x1, 0xd}, 0x3d, 0x1, 0x0, 0x0, "e05af125206a4fc40edabc09ad612db843f4b0d8a08739ee6876e18eacac9cfb00221a81e3faf753c982de563cb39e21a946b5dae292e17fd1374a851793ef59"}}}}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x4000, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000240)={0x6, 0x13, 0x1, 0x6, "5a2227fa960874d6a1662c7c89af30a24113fca925df00452dfdd18ccc695a30"}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)=0x13, 0x4) write$cgroup_type(r2, &(0x7f00000002c0)='threaded\x00', 0x9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x4, 0x3, [0x4, 0x8, 0x200]}, &(0x7f0000000340)=0xe) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r5, 0x80000001}, &(0x7f00000003c0)=0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)=0x0) r7 = fcntl$getown(r2, 0x9) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r3, &(0x7f0000000440)={r4, r0, 0x3}) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000480)={0xff, 0x5}) ioctl$RTC_AIE_ON(r1, 0x7001) io_setup(0x8, &(0x7f00000004c0)=0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) io_pgetevents(r8, 0x7, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f0000000600)={r9, r10+30000000}, &(0x7f0000000680)={&(0x7f0000000640)={0x8}, 0x8}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000006c0)="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") r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1ec, r11, 0xd10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x920}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @local, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000ac0)={{0x1, @addr=0x29}, 0x8, 0x20, 0x6b3}) write$FUSE_IOCTL(r2, &(0x7f0000000b00)={0x20, 0x0, 0x2, {0xfff, 0x0, 0xfffffffffffffffc, 0x7ff}}, 0x20) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000b40)={0x5, 0x0, 0x4000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000b80)=0x7, &(0x7f0000000bc0)=0x2) 02:25:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:31 executing program 2: unshare(0x8000400) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0xa, &(0x7f0000000080)='/dev/dsp#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r1, 0x4) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r2, 0xfffffffffffffffd) 02:25:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) bind(r1, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x2, @remote, 'ip6gretap0\x00'}}, 0x80) connect$l2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockopt$packet_buf(0xffffffffffffffff, 0x111, 0x1, &(0x7f0000000400)=""/162, &(0x7f0000000000)=0xa2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x200, 0x4) 02:25:31 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) dup3(r1, r0, 0x0) 02:25:31 executing program 0 (fault-call:7 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4080, 0x0) 02:25:32 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x4, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0xffffff7f, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', 'vcan0\x00'}, &(0x7f00000000c0)=""/66, 0x42) [ 364.005608] FAULT_INJECTION: forcing a failure. [ 364.005608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.017737] CPU: 0 PID: 11942 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #7 [ 364.024874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.034288] Call Trace: [ 364.036942] dump_stack+0x173/0x1d0 [ 364.040639] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.045906] should_fail+0xa19/0xb20 [ 364.049709] should_fail_alloc_page+0x212/0x290 [ 364.054438] __alloc_pages_nodemask+0x4a2/0x5e30 [ 364.059263] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.064538] ? update_cfs_rq_load_avg+0x5e1/0xa10 [ 364.069446] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.074704] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 364.080121] ? update_load_avg+0x11b5/0x1a90 [ 364.084614] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.089875] alloc_pages_vma+0xd26/0x1970 [ 364.094140] handle_mm_fault+0x5528/0x9e30 [ 364.098481] __do_page_fault+0xdfd/0x1800 [ 364.102724] do_page_fault+0xe9/0x5c0 [ 364.106587] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 364.111300] ? page_fault+0x2b/0x50 [ 364.114973] ? page_fault+0x8/0x50 [ 364.118574] page_fault+0x3d/0x50 [ 364.122085] RIP: 0033:0x40740d [ 364.125327] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 46 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 364.144269] RSP: 002b:00007f2e120a20a0 EFLAGS: 00010206 [ 364.149706] RAX: 0000000000407400 RBX: 00007f2e120a3c90 RCX: 0000000000000000 [ 364.157009] RDX: 000000002001e000 RSI: 0000000000000005 RDI: 0000000000000004 [ 364.164345] RBP: 000000000073bf00 R08: ffffffffffffffbd R09: 0000000000000000 [ 364.171699] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f2e120a46d4 [ 364.179001] R13: 00000000004c64e2 R14: 00000000004db608 R15: 0000000000000008 [ 364.187859] syz-executor0 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 364.196323] CPU: 0 PID: 11942 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #7 [ 364.203468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.212850] Call Trace: [ 364.215530] dump_stack+0x173/0x1d0 [ 364.219221] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.224502] dump_header+0x1e7/0x1960 [ 364.228366] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 364.233618] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 364.239189] oom_kill_process+0x301/0x1020 [ 364.243498] out_of_memory+0x1250/0x1d00 [ 364.247621] ? mutex_trylock+0x151/0x260 [ 364.251775] pagefault_out_of_memory+0xdd/0x130 [ 364.256551] mm_fault_error+0x38c/0x5d0 [ 364.260603] __do_page_fault+0x1049/0x1800 [ 364.264918] do_page_fault+0xe9/0x5c0 [ 364.268780] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 364.273534] ? page_fault+0x2b/0x50 [ 364.277230] ? page_fault+0x8/0x50 [ 364.280832] page_fault+0x3d/0x50 [ 364.284320] RIP: 0033:0x40740d [ 364.287564] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 46 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 02:25:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="57c5cd26ad91624da820ad2f0c56dca7903e2c9b4d5352c3423ac4d82933203f076260115a5bdb4dbd9020e84527ec49c4eb0f7dd0f966221a5aa61cc5faeaffd72367581f613a8855048293d9d1d7f62be72e3fcbade805d5e03c56d6c6b0bb0128337e704f644ec8bb63dcec9d47f2c6afaaebd3fad6d9de24fb9f70dbe179d062d1a80b49cc2812bafc3bcd6cba3d5a5b8e726631e7a36bf62c20b81fd8fbb29ebe1245ee67f37b6f7232aa7ec510614ad981940f33cf", 0xb8}, {&(0x7f00000001c0)="e72ec65ab9ea474a47e38badf83037735bc559240a8ee0b2515d119e522cb434996ff363e8787ff60286b7ac7687e9ae35db46e24a060008c5c3ea151e95f6b82347d0c0264123337c868d13ef527c9007ee7f047bd7c64a769d88761f40564089d2567d34ea68c04c9fcde31273c9668f223318840558a315b7e9af07771ba1f27359b2af63b66c7df291c7d93a266da19734c2a8553f7b97fec564c6c79b8e503234c92738e02fe58a4a7ec6bb73205f578f7d80b6778d5c940796198f23016cf0324b0f996c755d834b0eb5224cedae66dffe241c17bed281", 0xda}, {&(0x7f00000002c0)="e6ef7c63f7d3fc2216042cc9879a62fe2c27a2f31043751a8559502985c5a6adbc01a1a8ec006d69d0cee0969c77ddb0002a465c5b3647e6c742ace89f28303604d03d95a26e324e5fe5f37384659bd4eae2dc2d6d5edfbaaaa5e725e1bb360f45228ec115dc40b226a04c32bbc98c139f052d8c73fa8e03762231afbb7cbe909b729c445e7fdcf939e993146abdc96c4c587d6d3f92fa6923f441909ad9", 0x9e}], 0x3, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) r1 = syz_open_pts(r0, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x400}) [ 364.306507] RSP: 002b:00007f2e120a20a0 EFLAGS: 00010206 [ 364.311911] RAX: 0000000000407400 RBX: 00007f2e120a3c90 RCX: 0000000000000000 [ 364.319215] RDX: 000000002001e000 RSI: 0000000000000005 RDI: 0000000000000004 [ 364.326521] RBP: 000000000073bf00 R08: ffffffffffffffbd R09: 0000000000000000 [ 364.333844] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f2e120a46d4 [ 364.341169] R13: 00000000004c64e2 R14: 00000000004db608 R15: 0000000000000008 [ 364.348608] Mem-Info: [ 364.351157] active_anon:82497 inactive_anon:188 isolated_anon:0 02:25:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) unshare(0x20400) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000000)=""/174) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) [ 364.351157] active_file:7476 inactive_file:31798 isolated_file:0 [ 364.351157] unevictable:0 dirty:62 writeback:0 unstable:0 [ 364.351157] slab_reclaimable:4234 slab_unreclaimable:10974 [ 364.351157] mapped:45977 shmem:244 pagetables:873 bounce:0 [ 364.351157] free:1006074 free_pcp:721 free_cma:0 [ 364.384779] Node 0 active_anon:329988kB inactive_anon:752kB active_file:29760kB inactive_file:127192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183908kB dirty:248kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 258048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 364.413279] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 364.439643] Node 0 DMA free:15904kB min:212kB low:264kB high:316kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.466040] lowmem_reserve[]: 0 2800 3490 3490 [ 364.470719] Node 0 DMA32 free:894904kB min:38380kB low:47972kB high:57564kB active_anon:325860kB inactive_anon:28kB active_file:20140kB inactive_file:120872kB unevictable:0kB writepending:228kB present:3129332kB managed:2872032kB mlocked:0kB kernel_stack:3648kB pagetables:3260kB bounce:0kB free_pcp:908kB local_pcp:568kB free_cma:0kB [ 364.500550] lowmem_reserve[]: 0 0 690 690 [ 364.504840] Node 0 Normal free:19848kB min:17656kB low:20020kB high:22384kB active_anon:4128kB inactive_anon:724kB active_file:9620kB inactive_file:6420kB unevictable:0kB writepending:20kB present:786432kB managed:706992kB mlocked:0kB kernel_stack:10432kB pagetables:380kB bounce:0kB free_pcp:1812kB local_pcp:1408kB free_cma:0kB [ 364.534235] lowmem_reserve[]: 0 0 0 0 [ 364.538131] Node 1 Normal free:3087112kB min:42048kB low:52560kB high:63072kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3141296kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.566119] lowmem_reserve[]: 0 0 0 0 [ 364.569978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 364.583522] Node 0 DMA32: 125*4kB (UM) 59*8kB (UM) 42*16kB (UM) 2*32kB (UM) 2*64kB (UE) 2*128kB (ME) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (M) 210*4096kB (M) = 865836kB [ 364.599389] Node 0 Normal: 174*4kB (UE) 96*8kB (UME) 13*16kB (UE) 32*32kB (UME) 118*64kB (UME) 63*128kB (U) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19848kB [ 364.614537] Node 1 Normal: 6*4kB (UME) 4*8kB (ME) 11*16kB (UME) 7*32kB (UME) 5*64kB (UME) 6*128kB (UME) 1*256kB (M) 6*512kB (UME) 8*1024kB (UME) 5*2048kB (ME) 748*4096kB (M) = 3087112kB [ 364.631645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.640533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.649271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.658233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 364.666985] 39612 total pagecache pages [ 364.671007] 0 pages in swap cache [ 364.674636] Swap cache stats: add 0, delete 0, find 0/0 [ 364.680046] Free swap = 0kB [ 364.683204] Total swap = 0kB [ 364.686250] 1965979 pages RAM [ 364.689381] 0 pages HighMem/MovableOnly [ 364.693509] 281923 pages reserved [ 364.696987] 0 pages cma reserved [ 364.700401] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor3,pid=11875,uid=0 [ 364.714642] Out of memory: Kill process 11875 (syz-executor3) score 1005 or sacrifice child [ 364.723344] Killed process 11889 (syz-executor3) total-vm:70664kB, anon-rss:2220kB, file-rss:32768kB, shmem-rss:0kB [ 364.728012] IPVS: ftp: loaded support on port[0] = 21 02:25:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10802, 0x0) write$nbd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="67446698010000000300040003000000c6facd8be4773fad8c6e46a501ff093c767cfd13bc89990451e24196425c6b0e7d209ea5be7cea44a36aeed0bad57d12ee56d888a499300247eb1e76d5de3fa85863f6155a8b69b00accd465dc726885ee61645cb983ea781740e3b526c023c330635c240f1e59c479351d7c0fb217e350bf644760ccdd8e0d9c1988d03ea79ee52e527b31401d4249f4f0161f4337e99ee82db6f1cf29709874fb399d80604b2324a0e7a5609e51803a3e092fe49fb056b6d9f53cc7e9dd60f2404db44359d293207d120b197629a5e62607db5116d154c59fb8d922fbaca1570cefa86f26c61346f3a5b4f4d86998fbda494ae17b8d718e1979d59f0bca56eabbe5a4fffffffffffffffba121"], 0xe9) [ 365.163938] chnl_net:caif_netlink_parms(): no params data found [ 365.269470] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.276136] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.284838] device bridge_slave_0 entered promiscuous mode [ 365.326061] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.332736] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.341086] device bridge_slave_1 entered promiscuous mode [ 365.436641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 365.451402] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 365.488268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 365.497308] team0: Port device team_slave_0 added [ 365.506982] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 365.515853] team0: Port device team_slave_1 added [ 365.522391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 365.532152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 365.617013] device hsr_slave_0 entered promiscuous mode [ 365.772487] device hsr_slave_1 entered promiscuous mode [ 365.923204] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 365.930793] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 365.965145] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.971764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.978952] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.985562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.078590] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 366.085297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.098743] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 366.113978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.124215] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.142609] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.154422] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 366.173696] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 366.179801] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.198075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 366.207714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.217998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.226554] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.233135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.253482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 366.262751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.271564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.281586] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.288143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.307169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 366.322743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 366.335971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 366.347915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.357414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.366989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.376760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.390364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.407061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 366.414147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.423927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.439969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 366.448255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.456944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.474971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 366.482050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.490822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.511178] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 366.517948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.546894] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 366.568980] 8021q: adding VLAN 0 to HW filter on device batadv0 02:25:34 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x80004}) unshare(0x20400) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 02:25:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000340)=""/98, 0x62}], 0x2) r3 = dup(r0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x1, 0x845, 0x2, 0x10001, 0xf, 0x46a, 0x1, 0xf305, 0x20, 0x9, 0xffffffff, 0x1}) 02:25:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r3, 0x406, r0) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000080)='/dev/udmabuf\x00', 0xd) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x2000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10802, 0x0) write$nbd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe9) 02:25:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10802, 0x0) write$nbd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe9) 02:25:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000180)) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pread64(r3, &(0x7f0000000080)=""/179, 0xb3, 0x0) close(r1) fadvise64(r3, 0x0, 0x3, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:25:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x88\x00', 0x19, 0xffffff1f, 0x90, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=[{}, {}, {}]}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xf3, 0x6, 0x8f3a, 0x62}, {0x1, 0x7, 0xfff, 0xfffffffffffffffa}, {0x8, 0x7fff, 0x0, 0x5}, {0x3da, 0x8, 0x8, 0xfffffffffffffc01}, {0x7d, 0x6, 0xffffffff, 0x400}]}) [ 367.437435] kauditd_printk_skb: 3 callbacks suppressed [ 367.437471] audit: type=1326 audit(1547432735.485:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12007 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x0 02:25:35 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000440)={0x0, 0xd2, 0x3, &(0x7f0000000400)=0x401}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$inet(0x2, 0x200000006, 0xffffffffffffce58) getcwd(&(0x7f00000001c0)=""/160, 0xa0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x88, @multicast2, 0x15, 0x0, 'lc\x00', 0x0, 0xffffffffffffffff}, 0x2c) r3 = accept(r2, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10010802}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r4, 0x401, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4041) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 02:25:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) mmap(&(0x7f000002d000/0x7000)=nil, 0x7000, 0x1000008, 0x40050, r2, 0x0) 02:25:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xec4}}, 0x0) 02:25:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x24000) write$P9_RLERROR(r3, &(0x7f0000000140)={0xe, 0x7, 0x2, {0x5, 'syz1\x00'}}, 0xe) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200000, 0x0) write$UHID_CREATE(r5, &(0x7f0000000200)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/42, 0x2a, 0x5, 0x0, 0x3, 0x6, 0x6}, 0x120) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:36 executing program 3: r0 = socket$inet6(0xa, 0x5, 0xffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x101200, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000400)={0x9, 0xc, 0x4, 0x70000, {0x77359400}, {0x1, 0xc, 0x3, 0xfffffffffffffffd, 0x5, 0x2, "eb44ceb6"}, 0x2, 0x3, @planes=&(0x7f00000003c0)={0x80008000, 0x7, @mem_offset=0x40, 0x7}, 0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b00)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000180)={r4, 0xa9, "507c6a01e86bf93314c21b6ea2988128f330b9b68afdf602083a2ace42f6365babffc8d5083840b5efd0156cc80f03a3926a8ccec092438ca08ed93d00a0287309c2aa31953561cb2f076a6c91340b37336c6403ddff7fc292d6b8dff4076a352e6e0a13d8c261dfeba9913cf1baf76cb320614139ad44bd6fdd96be58209e99399ed648939ab47abbf7a90a3d6c9e79be05a470d0d0d1e950cd5fbf56c1dcfad9fdaf5f4b405d2518"}, &(0x7f00000000c0)=0xb1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x309) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) epoll_wait(r5, &(0x7f0000000340)=[{}, {}, {}], 0x3, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'team0\x00\x00\xff\xff\xff\xc0\x00', 0xc201}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000280)=0x8) [ 367.957758] netlink: 3760 bytes leftover after parsing attributes in process `syz-executor2'. 02:25:36 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xa0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x7, 0x0, 0x10000}) [ 368.189984] audit: type=1326 audit(1547432736.235:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12007 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0x0 02:25:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r3, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x800) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000004c0)={0x2, 0x4}) unshare(0x40040800) r3 = msgget(0x3, 0x60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @multicast2}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8) r7 = getegid() r8 = getpgrp(0x0) r9 = gettid() msgctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0x0, r4, r5, r6, r7, 0x84, 0xbe0}, 0x8000, 0x65, 0x0, 0x6, 0x23db, 0x6fe, r8, r9}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x20000) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:36 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='\x00\x04t=netfilt\xf2a[') ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) ioctl(r3, 0xc2604110, &(0x7f0000000000)="b60be09850e7fa9164681948a632ac99f03dcd88acc191a27c6a7ffe59bd7efb14c033e801ba74a3334ad5cc9777c562e1d59473d986b906448d112d0134225d3ab2d59867") getdents64(r2, 0x0, 0xfffffd36) 02:25:36 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc, 0x5) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=r1) socket(0x11, 0x5, 0x100000000) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 02:25:36 executing program 2: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xffffffbffffffffe) shutdown(r0, 0x2) 02:25:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180), 0x10) r1 = socket(0xa, 0x2000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@dev, @multicast1}, 0x5) 02:25:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x824020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0100023c123f3188a070") r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000008c0)=ANY=[@ANYBLOB="0014000000000890780000000000000000000000000000000062175725570347d6a591e8405e6e0e1b518e88"], 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) r3 = gettid() getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$nl_netfilter(r2, &(0x7f0000000880)={&(0x7f0000000100), 0xc, &(0x7f0000000840)={&(0x7f0000000240)={0x5e0, 0x13, 0xf, 0x2, 0x70bd2a, 0x25dfdbfc, {0x3, 0x0, 0x5}, [@nested={0x148, 0x66, [@generic="c76e9f0ec8108e9c86eaab12d32d72b2a97c0683303a719df7d75e1f51f5e75d78480fccd5a9d1933c3c27395b7cb4fdcf0853a0390b611073e8d40a0ab9263ae5088d97fa83f3257fdf519658bfda1faf62022edfa4904db47b984fe2d02b82bd8cbaf23c53f32e507fb682eac647d2c25a6492b7a9e499ec5012c8662a425804ed0f01ab4d37f620cad7ab07b8ead2c26e801a87ad6e52a1c49600c31f95cf58b1e09a36ed9dead27dffe0763d33080de231", @generic="72288a671c151a52ab95781f18bfe3860cc8b0826b35cf4d0e431441e7cfd061ada42327c7c2e7111cb6d6bf180efe1e28d03064bf3f6628a891edf1acd40b0324470b1a993645008f5070cf56f78fbdd4db3a520d560c9a229e11a6a90235a4cd2d4f5846a1c88565b299d3cd74040ef81c68fda127b5268e8c9d1c2798f6f73242841612d4ed77", @typed={0x8, 0x61, @pid=r3}]}, @typed={0xb4, 0x92, @binary="bc7d253bc755f10abc7aa065672872069c98f2026d5cbe0b50f41287ecbe02560ec35cc7b95e49c567d82f4b08734494ea6ff3c8fea8b939cc562b36dc356e49a3f152513a8cc998cb8ce8fa132e1726bcee3f2e9f8585b0d3ac6fcb013e0a2b03566958c0017c23c0998afafd248b190eb85f69a1e4b6265bcd564c0ec753b29d7528663728bc727327cb752e5bab74ffd2b3929efcae79a8f3045b1fe3bf06722649e33b142e6e1a9bf64c2211d667"}, @typed={0x8, 0x3b, @uid=r4}, @generic="5d041e329495e5281ea0dc1cf00079a805964d2be6af68fb6fa483396389fc49afb0b45f8fa280164ea568d35e5a7d9e56675c823e884af617a8b4f8f5f2bf5888815257f675af497766f0719a6790f8683a079a86c3fed0a0d9c56addfab744f755b937545fc1e731bd523e9235fcb8446d5c18cdbb7968566984b77dbf79fe8124e29e415aee25bad05aed29f588ab1114ab79fbcebac89ea47bcca1553d22feca08433c8e9fac1ef56d5aaabad8531f08d33f7e242b41a4e2bd78692180c593e33cba146bce019a46bd737d7420301e22fa7fe0f44152229cae4c3996d276b233cb072b888e3b48bdce91837207bf216f1d3c504c4d6fd595", @nested={0x18c, 0x86, [@typed={0x8, 0x40, @u32=0x10001}, @generic="cc440044b8c260b9214c23ebffbe67199774b49d23c963725741a1513c778c1973ed74eef791c29ee6b8cd52947fdab4eb84ef4b0248ccf3ab2064fda077e4ee459340cae109587eceeda16d543703df98f62d677f216d6b86e157547bf8b7df6300d655a50ae93047906cb1bc04f4eee4fe62528c49599d10abb83fc3c1c679a680176b4e304f0002", @generic="9c3322f110aa17649457aa7ebdd658374e158b6a214c7b1d078291b268cd3b17ad7034b5e976a8e75de97f6e4c1c09113fa1ab3708906164d0c65abce8bac60bc9ee54803ac26a3b78c471fc38e39fb39b54907952e8d1e8edcbc7c19e93ddd6db474b9360ae48182e3857df8baf3a5c6ded10218620d2a06581382104debc5a3ef19211344043d2f74b615c689bf417f05add4bd99ee7dbe7060577a0c55c3c47899a9eefdba015cf7a6f0bb5dd400fc842e0472fa633ba75fca6d112ddb5f9e3c89684cb618440438a0fefccfad451d64fa7a762d259b764c8d01e1fe670fad491475d48365e31d24361508dcacef5fbb21b9d"]}, @generic="5512e5d2dbef67a12dee0d392c69181b7ffb47998a089ca52bf26dd4fbb77b88121cd94fff38f42ab7f8364749bd5fdeb11ac0c6ff0e819af69015c79e3aa1f468605b6ba350eb5e63ff655c7b91f6b956ec7bd76f6862b694c5928df9fc0664bf789ac33c047b202e52477285e6ad938cc041eacf95de1102021deb2d51d8186a99f4cb3a1c45c4a52b6e8857dffa9e47c095a05b1c83beb09c91142fbf817ad9a56efd95286fc77da52ba29a196b2259e2a7287595dd16a88ab65e2fd750aa6fccca50f8ea44f4e21121764e7d5ae34fbb6e4411194551315d995162c9cba53c03a444313befe6d30f3e693f1c16707c81c7", @nested={0x44, 0x90, [@generic="56c395e247095a1c6375d66607219228f69dded97dfb546541a5d3fb7ec0a9e2fd8854c668", @typed={0x8, 0x60, @fd=r1}, @typed={0x8, 0x46, @pid=r5}, @typed={0x8, 0x65, @ipv4=@empty}]}, @typed={0x8, 0x2f, @fd=r0}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x404c001}, 0x4000004) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0xac) [ 369.434128] 8021q: adding VLAN 0 to HW filter on device team0 02:25:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000000, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000000c0)={0x7, 0xffffffffffffffa4, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x80, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) socket$inet6(0xa, 0xa, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 369.612704] protocol 88fb is buggy, dev hsr_slave_0 [ 369.618430] protocol 88fb is buggy, dev hsr_slave_1 02:25:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x24020400) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(r3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000021000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x387) [ 370.114423] 8021q: adding VLAN 0 to HW filter on device team0 02:25:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000d54abfde20"], 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x12, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 02:25:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x400000b7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80100, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) pread64(r1, &(0x7f0000000180)=""/85, 0x55, 0x0) 02:25:38 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x4, 0x5, 0x1753, 0xfff, 0x15, 0x2, 0x0, 0x5, 0x794fd51a, 0x1}) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="c3000000090000004037811a06a7f26960fab9fdd67b7f36dae7033fddeb4da7d32c3a4cc2dec7064a8faac341d1316b80b83f47a5827129d0770327fe6ad619102ee8e19fa15cc9d07370d190ac286f4332524a3dd098b77c46cdf6e00037bcd3e8b67015ed762d5d80c9a3e16765a5fdc9c38b57dc9936e53cfacf5bec223fd5d794fd8d1a890f4415924287575b7ddabc15cf9de735685cc14ba347dc86a228aad16c78138129e97fe86b000000000000c22b44e9a7d8f7928fd4f2834c0638a236"], 0x2100) 02:25:38 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8001, 0x0) r3 = fcntl$getown(r0, 0x9) ptrace$setsig(0x4203, r3, 0xe82e, &(0x7f0000000080)={0x2f, 0xc000000000000000, 0x7}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000040)={'bcsf0\x00', @ifru_names='gre0\x00'}) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, &(0x7f0000105000)) 02:25:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x9, 0x40, 0x8000000001}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1f, 0x8, 0x8, 0x4, 0x6, r0, 0x8000000ffff}, 0xff95) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x80) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740001, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x6a73, 0x453a, 0x15, 0x7fffffff, 0x1, 0x3, 0x11, 0x4}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000340)) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000007ffff) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000300)={0x10f005, 0x4000, 0x7fff, 0x9, 0x8000}) getpeername$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000440)=0x1c) getpeername$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000400)) 02:25:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000030000/0x18000)=nil, 0x0, 0x2aa, 0x200, 0x0, 0x2da) [ 370.689931] Unknown ioctl -2147191725 02:25:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 370.783147] Unknown ioctl -2147191725 02:25:39 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x20040, 0x0) mbind(&(0x7f0000526000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000080)=0x40000000003, 0x7, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x600002, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000525000/0x4000)=nil, 0x4000}}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0x117002) mbind(&(0x7f000051e000/0xb000)=nil, 0xb000, 0x4003, &(0x7f0000000040)=0x203, 0x2, 0x0) 02:25:39 executing program 4: r0 = socket(0x3, 0x4, 0x2000000000ffd) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x4, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2040, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0xa46, "14670e05ec337d7505367e4fb1f128217c0b13357a0671f7bf66330acf09dfe4", 0x3, 0x100, 0x1ff, 0x0, 0x10, 0x2, 0x2, 0x4}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000001, 0x121041) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000100)=0x2, 0x8) 02:25:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x800, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000005480), 0x3007) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffff, 0x800) write$FUSE_POLL(r3, &(0x7f00000000c0)={0x18, 0xe1617aa2d88185a, 0x3, {0xfffffffffffffffc}}, 0x18) 02:25:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x103) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000000c0)={0x0, 0x3f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 371.309888] QAT: Invalid ioctl 02:25:39 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000582bb07f8d779078d00040000cff5e0"], 0x14}}, 0x4000000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 371.365534] QAT: Invalid ioctl 02:25:39 executing program 4: r0 = socket(0x200000000000011, 0x803, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) 02:25:39 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) bind$inet6(r0, &(0x7f0000012000)={0xa, 0x0, 0x0, @mcast1, 0x8000000008001}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x100000001, @mcast1, 0xfffffffffffffffa}, {0xa, 0x4e23, 0x100000000, @mcast1, 0x5}, 0x4b, [0x6, 0x8, 0x1ff, 0x5, 0xed1, 0xdc65, 0x4, 0x3]}, 0x5c) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x408, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000040)=""/16, &(0x7f0000000000)=0x10) 02:25:39 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x101000, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x7, 0x1, 0x800, 0x1fa, 0x0, 0x2, 0x88000, 0x6, 0x800, 0x8000, 0x7fffffff, 0x6, 0x4, 0x6, 0x300000000000, 0x1, 0x7fff, 0x1, 0x8, 0x742, 0xfffffffffffffff8, 0x2, 0x1, 0x1f6, 0x200, 0x10000, 0x7, 0xb9dc, 0x8, 0xffffffff, 0x2, 0x6, 0x4000000080000, 0x2, 0x21b, 0x821f, 0x0, 0xe0, 0x4, @perf_bp={&(0x7f0000000080), 0x7}, 0x10000, 0x9, 0x1000, 0x8, 0x5, 0x6, 0x1f}, r0, 0x10, r1, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(r3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) prctl$PR_SET_UNALIGN(0x6, 0x3) 02:25:39 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ppoll(&(0x7f0000000080), 0x2000000000000096, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) 02:25:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x70, 0x5, 0x9, 0x0, 0x3ff, 0x0, 0x100000000, 0x0, 0x4, 0xffffffff, 0x7771, 0x7fff, 0x6, 0x2, 0x7, 0x9, 0x4, 0x80000000, 0x7, 0x7c0e, 0x3ff, 0xfffffffffffffff8, 0x9c, 0xf9c, 0x800, 0xffffffffffffc4c5, 0x0, 0x9, 0xfffffffffffffffd, 0x33, 0xfffffffffffffffa, 0x7, 0x8, 0x1c7, 0x1, 0x8, 0x9, 0x0, 0x40, 0x6, @perf_bp={&(0x7f0000000100), 0x5}, 0x40, 0x1ff, 0x6, 0x5, 0x7fffffff, 0x871, 0x3376800000000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x2000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000001c0)={r0, 0x0, 0xfffff000, 0x1000000000000}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000300)=0xfffffffffffffc18, 0x4) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400000, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000280)={r3, r2, 0x2}) close(r1) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000340)={[0x3000, 0x7000, 0xf005, 0x1000], 0x4, 0x10}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x1, 0x1, 0x80, 0x101, 0x7f}, 0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:40 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x10002) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r0, &(0x7f0000000200)={0x5}, 0xffffffffffffff14, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) chdir(&(0x7f0000000100)='./file0\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18}, 0x18) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x17, 0x0, 0xff, 0xffff, 0x14, r2, 0xc0000000}, 0x2c) 02:25:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x6e3adc12, 0x2, 0x5, 0x5, 0x0, 0x0, 0x1, 0x1, 0x10001, 0x4, 0x1ff, 0x5, 0x1, 0x8, 0x0, 0xffffffffffffffe1, 0x3f, 0x0, 0xd0c7, 0xfffffffffffffbff, 0xfffffffffffffffd, 0x100, 0x1, 0x7c5a, 0x200, 0x4, 0x9, 0xe14, 0xffffffffffffff01, 0x0, 0x5b7e, 0x1, 0x9, 0x8001, 0xdea, 0x305b, 0x0, 0x3, 0x5, @perf_config_ext={0x80000001, 0x9}, 0x20, 0x6, 0x7, 0x9, 0x479, 0x0, 0x10000000100}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000000000400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(cbcmac(tnepres),lrw(cast6))\x00'}, 0x58) 02:25:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) uselib(&(0x7f0000000080)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x3) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)) 02:25:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xfffffffffffffffe) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000000)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x131600) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs(r2, &(0x7f0000000100)='maps\x00') close(r1) 02:25:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000200)=""/145) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=0x0, &(0x7f0000000300)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0x2, 0x20}, 0xc) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000000c0)={0x7, @raw_data="16c64746ff4124fe2aae54904d2fe49dd6100cd7681154fa1ff1e9c045793aa301e719d27fdbf61e6d134678cda68673b6866e5f5f62e9f03520b251d986df6de2724d9d817fd936a72de672e7a6497821fd6715f111ee2dabc90b80e9c277bf945cfcbc6d2c6fde1e59741409a52de59863f37d11ee7a88c8e30b7de8911bdfe89c934cea3ea0b0a8d74144bb65fefc0503f7389137f7de92af3fe5ba2c947d99e3526b27ea96f5f4a4630dea31b3a76e648a1aeddadb9cf37739e5db9253744922006b2766ec85"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x101801, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000000c0)) ioctl$KVM_SMI(r2, 0xaeb7) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x9, 0x5, 0x3, 0x0, 0x2, 0x6, 0x3, 0xf8, 0x4e59, 0x8, 0x8001, 0x643d}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:40 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000080)={'lo\x00', @ifru_hwaddr=@link_local}) 02:25:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000d7709dd745c4673300000000000000000000000000000000000000000000000000069c8de2432e30220952"]) 02:25:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r2 = dup(r1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x3, 0xd28, [0x0, 0x20000380, 0x20000498, 0x200004c8], 0x0, &(0x7f0000000000), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x0, 0x6004, 'erspan0\x00', 'bridge0\x00', 'nr0\x00', 'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x70, 0xb8, 0xe8}, [@common=@ERROR={'ERROR\x00', 0x20, {"1bb1f5d6240099f0d1640bdd6287f4c719cb8f87526bcbf3b9c1e33fe12e"}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x7, 0x20, 0x80f3, 'veth0_to_bridge\x00', 'bond0\x00', 'gretap0\x00', 'ip_vti0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @random="51e3e949c09f", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x8b8, 0x918, 0xa48, [@arp={'arp\x00', 0x38, {{0x10e, 0x8a63, 0xa, @broadcast, 0x0, @empty, 0xffffff00, @local, [0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff], 0x10, 0x50}}}, @u32={'u32\x00', 0x7c0, {{[{[{0x100}, {0x1, 0x2}, {0x2, 0x3}, {0x9, 0x3}, {0x8, 0x3}, {0x6, 0x1}, {0xad5}, {0x8}, {0xfffffffffffffff7, 0x3}, {0x400, 0x1}, {0xff, 0x3}], [{0x3, 0x8000}, {0x3, 0x6}, {0x3ff, 0x4}, {0x3, 0x2dc1}, {0x2, 0x8}, {0xffffffff, 0x66}, {0xf915, 0x30fb000000000}, {0x7fff, 0x9d}, {0x5, 0x21}, {0x8, 0x7}, {0xf9d, 0xfffffffffffff800}], 0x7, 0xb}, {[{0x7fff, 0x3}, {0xc5cf, 0x2}, {0x5, 0x3}, {0x81, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6}, {0xd9a, 0x3}, {0xee9, 0x3}, {0x3, 0x3}, {0x2, 0x1}], [{0x1ff, 0xfad}, {0x4}, {0x8, 0x1}, {0x6, 0x100}, {0x58a0, 0x3}, {0x80000000, 0x80000001}, {0x2, 0x45}, {0x0, 0x7}, {0xe550, 0x10001}, {0x5, 0x7ff}, {0x8, 0x3f}], 0x0, 0x8}, {[{0x80000000}, {0x100}, {0x2, 0x3}, {0x7, 0x1}, {0x24da, 0x2}, {0x6, 0x2}, {0x9}, {0x80000001, 0x3}, {0x7, 0x2}, {0x800, 0x2}, {0x20000000, 0x1}], [{0x5, 0x1f}, {0xffff, 0x99}, {0x811, 0x4}, {0x8, 0x6}, {0xc75, 0x7fff}, {0x7f, 0x6}, {0xfffffffffffffffd, 0x6}, {0x7fffffff, 0x3}, {0x1}, {0x3, 0x5}, {0x10001, 0x800}], 0x6, 0xffff}, {[{}, {0x4, 0x3}, {0x8}, {0x8001, 0x1}, {0x4, 0x3}, {0x800}, {0x20, 0x3}, {0x7fff, 0x2}, {0x5, 0x3}, {0x100000001, 0x3}], [{0x1, 0x9}, {0xffffffffc956b667, 0x6}, {0x9, 0x6}, {0x8e, 0x7}, {0x6, 0x80000000}, {0x7f}, {0xfffffffffffff001, 0x3f}, {0xffffffffffffffff, 0x3}, {0x1, 0x2}, {0x0, 0x6}, {0x5c, 0xe5d9}], 0x2, 0x4}, {[{0x3, 0x3}, {0x3, 0x2}, {0xace6}, {0x48d, 0x3}, {0x8, 0x3}, {0x7, 0x3}, {0x200, 0x2}, {0x5, 0x2}, {0x400, 0x3}, {0x8, 0x3}, {0x3, 0x2}], [{0x3ff}, {0x5, 0x80}, {0x100}, {0xffffffffffffff01, 0x444}, {0x9, 0x3ff}, {0xfff, 0x7fff}, {0x8, 0x7}, {0xe9, 0xad}, {0x7f, 0x6}, {0x4, 0xffffffff}, {0x2, 0x3}], 0x5, 0x5}, {[{0x80, 0x3}, {0x35, 0x3}, {0xfffffffffffffc00, 0x2}, {0x1, 0x3}, {0xfff, 0x2}, {0x7, 0x3}, {0x8, 0x3}, {0x9}, {0xd0, 0x3}, {0x1, 0x3}, {0x1, 0x3}], [{0x8000}, {0xba5, 0x3}, {0x6, 0x7f}, {0x8001, 0x1506}, {0x56b0fb45, 0x10001}, {0x10000, 0x1}, {0x800, 0x3}, {0x7fff, 0x3}, {0x6, 0x8001}, {0x54ef}, {0x2d, 0x7fffffff}], 0xa, 0x9}, {[{0x84bb, 0x3}, {0x101, 0x3}, {0x64, 0x3}, {0x1}, {0x3}, {0x9, 0x3}, {0x8a5, 0x3}, {0x8, 0x3}, {0xfff}, {0x9, 0x3}, {0x0, 0x3}], [{0x7, 0x80}, {0x1, 0x7}, {0x8, 0x7}, {0x6, 0x5}, {0x1, 0xfff}, {0x7, 0x10001}, {0x9, 0x1}, {0x5, 0x3bfd}, {0x200, 0x100000000000000}, {0x100000001}, {0x80a, 0x10000}], 0x9, 0x9}, {[{0xffffffff}, {0x100}, {0x7ff, 0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x2b10}, {0x7b6e8fa0, 0x3}, {0xfffffffffffffffb, 0x1}, {0x2, 0x3}, {0x5, 0x3}], [{0x80000001, 0x4}, {0xdb, 0x40000000}, {0x20, 0x4}, {0xfffffffffffffffd, 0x1}, {0x9, 0x6}, {0x4, 0x6}, {0xfff, 0x8}, {0x0, 0x7fffffff}, {0x80000000, 0xcdd9}, {0x401, 0x7}, {0x359, 0x1}], 0x9, 0x7}, {[{0xffffffffffffff80, 0x3}, {0x1, 0x2}, {0x5, 0x3}, {0x1000, 0x3}, {0x0, 0x2}, {0xfff, 0x2}, {0x3}, {0x3, 0x3}, {0x9, 0x3}, {0x7f}, {0x2, 0x1}], [{0x100000000, 0x1}, {0x5, 0xa53d}, {0x80000, 0xc2f}, {0x10000, 0x7}, {0x3, 0x2}, {0xffffffffffff8000, 0x9}, {0x6, 0xfffffffffffffc01}, {0x0, 0x44ea}, {0xd3, 0xc6}, {0x3, 0xfffffffffffeffff}, {0xb2, 0x7}], 0x2, 0x5}, {[{0x3, 0x3}, {0x2, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0xfffffffffffffffe, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x3}, {0x800, 0x1}, {0x1000}, {0x4}], [{0x200, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x13, 0x80}, {0x6, 0x1}, {0xff, 0x80000001}, {0x0, 0x38}, {0x300000000, 0x41b2}, {0x9, 0x10001}, {0x9}, {0x40, 0x3}], 0x4, 0x9}, {[{0xe4, 0x1}, {0x6, 0x1}, {0x8}, {0x0, 0x3}, {0x3}, {0x7f, 0x3}, {0x20, 0x3}, {0x1, 0x3}, {0xffffffffffff8001}, {0x40, 0x3}, {0x1}], [{0x3ff, 0x9}, {0x868, 0xffffffffffffffff}, {0x800, 0x6}, {0x6, 0x3ff}, {0x7f, 0x6d}, {0x6, 0x1000}, {0x100, 0x800}, {0x4, 0x7}, {0x4, 0x7}, {0xffffffffffffff0a, 0x4}, {0x80000001, 0x100000001}], 0x9, 0x7}], 0x0, 0x1}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1ff}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x61, 'system_u:object_r:ldconfig_cache_t:s0\x00'}}}}, {{{0x9, 0x10, 0x201, 'bridge0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'team_slave_0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="c5fb106770d5", [0x0, 0xff, 0xff], 0x70, 0xe8, 0x138}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x1000, 0xba85, 0xffffffff, 0x0, "52520cd72653de249d8734a56ad1a3b9e13f7615af1372d7f03d9d83941024c4b7b702ad09324ec2d540e293ac5208eed110fadcf0cd2461771a1c3b7ab6c2a4"}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x1, 0x800}}}}]}]}, 0xda0) 02:25:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r4, 0xa, "8ae4873fff056a844cc2"}, &(0x7f0000000240)=0x12) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r5, 0x10001, 0x9, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000000c0)=0x2, 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x10, 0x0, 0x87401113df616900) 02:25:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='iso9660\x00', 0x0, 0x0) 02:25:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300000900000000f8dc00000000ed00000200010000000000000000000000f8ff0a30b0e3dc0921690a00000000000000ff0100000000000000000000000000010000000000000000cd99874e7ad4942b5d428a"], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'caif0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x80000000, 0x8, "eefacfbcbf4189a8"}}) 02:25:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0x3eb28fa8d1b9c545) [ 373.469257] Unknown ioctl 44548 02:25:41 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x10000000077fffb, 0x0, 0x720000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000100)={{0x0, 0x1}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x18) 02:25:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x140000000000000, 0x0, 0x6, 0x5}, {0xffffffffffffff3f, 0x4, 0x9bd5, 0x80000000}, {0x8, 0x5fcc8587, 0x100, 0x100}, {0x400, 0x8b, 0x2, 0x200}, {0x1, 0x1, 0xfffffffffffffb24, 0x80}, {0x1, 0x7, 0x0, 0x8}, {0x1, 0x400, 0x10001, 0x1}, {0x2, 0x7, 0x6, 0x20}, {0x0, 0xaf13, 0x1ff, 0x6}]}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x7, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 02:25:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) unshare(0x24020400) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40002) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) truncate(&(0x7f0000000300)='./file0/../file0\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, r3}}, 0x30) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x600000000000000, [0xc001001b], [0xc2]}) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) accept$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) 02:25:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) acct(&(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 373.812789] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 373.822888] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 373.945638] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 373.955781] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 02:25:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) getrusage(0x4, &(0x7f00000002c0)) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) write(r1, &(0x7f00000000c0)="27e1b700000015000707030e0000120f0a000900000000000000f5ff0000f5fe0012ff000000078a151f7508003900", 0x16) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7d2, 0x2, 0x0, 0x3, 0x1b, 0x1, "36fee1d259eba912282c65278594f3b5cc7c6ed4599211420d0cdc8ae8289d621c20db09c8c3fd06d1d963a716b1bcc85c9d1dc19f6c147a2abf087b2e167da1", "e940d56991dce230d3fdb26e07b67d822f560adf9fd0a2d214354014a18a9569951866cfa6d05d7c8635050d1252d52c7100fa37abe26f493a41e7b20ce07312", "2ca19e5bb1aa5b96a721c3187026fb5c4cb2ee426a77942cbf2fa1aba56c0606", [0x100000000, 0x8]}) 02:25:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4]}, 0x45c) 02:25:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a05, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4096, 0xffffffffffffffbf}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) sched_rr_get_interval(0x0, 0x0) fstat(r0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 02:25:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/172) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x0, 0x8}) close(r1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r4, 0x1}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 374.377324] input: syz1 as /devices/virtual/input/input9 [ 374.462223] input: syz1 as /devices/virtual/input/input10 02:25:42 executing program 4: mlockall(0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x410403, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0x9, 0x4b2, 0x4, 0x400000000000000, 0x3f, 0x20, 0x9]}) 02:25:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fcntl$setsig(r0, 0xa, 0xb) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)='/dev/kvm\x00', 0x9, 0x3) dup3(r0, r1, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) dup2(r1, r2) 02:25:42 executing program 4: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000009000290000000400000078047866c70401000000c0073510fbff0000c308000000fab7711721000000000000001600000000"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2800, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x100000000, 0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) 02:25:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x10f000, 0x0, 0x11000, 0x7007], 0x7, 0x8, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000100)={0x7}, 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000023000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:25:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x9, 0x0, 0x8000}}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/119) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0x81}, {0x16}]}, 0x10) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 02:25:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x92641, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4d87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18) 02:25:43 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) membarrier(0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x6c, 0x2, 0x4, 0x1, 0x5, 0x20, 0x562, [@dev={0xfe, 0x80, [], 0x21}]}, 0x18) 02:25:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10801, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x174, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffffffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcb}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x174}, 0x1, 0x0, 0x0, 0x3e}, 0x4000800) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000180)=0x1000fffe, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000a2ba0000b867c366af74a6f61729baaa0000"], 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 02:25:43 executing program 2: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) prctl$PR_GET_SECCOMP(0x15) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="1200000012000600007b00000000000000a1", 0x12, 0x0, 0x0, 0xfffffffffffffec5) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0xa3}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 02:25:43 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) ptrace$peekuser(0x3, r0, 0x3) unshare(0x2000400) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000100)) [ 375.839842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:25:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="030029bd7000ff0400000080000008000600ff0f00000800060038d7d60c08000600040000003000010032f61a740653ccf81a37b913c35ad092080009002600000014000300e0000002000000000000000000000000080001000a00000008800500040000000c000200080003f6311e2c78119c6ebcde0f6a2bce897800010000003c0003001400020076657468315f746f5f627269646765001400020067726530000000000000000000000000080008000700000008000300040000006c000200080d03000000000014000600fe8004000000000000000000000000bb080007004e201d0008000500ac1e0101140002006361696630000000001700000000000014000600000000000000000000000000a10457356488fb6a02d828896cab00000014000200626f6e645f736c6176655f300000005b2d6007e44b1a36b9024a49278dbf26f939098717d1f3c3613bf1ff08e1d3ca56da59020000001ce0411a8c9895e756d16f345a0ee77e7c625ab289f7893dafaa494192d32196880ae8656b3bb368a07f18d40d2762d59cb1d846951f00fc668368eec339333ccc268ab5ad6e944a4e7a24216e000f746eb4ee10d4f70d8fe82980619a84627d9bcda720b105b685a739cac828c431bd0686914926e2c2df4ba17f2d61ef5ca37dde7d883c0c1680ae22d7bc9e4196e048d49b58dbdde2124f89c8e9cfd13829ae156c7466695da25e6433b6aa8a81be4bf5f51751e9e8faa7c6f40447d30d0fe95e03b4d1c90d3a3d4f03cd17db9388fbcd5e59e84bfa0eaf5cf7cc28cb0d0d2805f399ae2556081f68633d4064537645457242fca57eac7dc7cd4d30bf3755129f34baccc026c96a08b6229b396d82d5bf946856fdf2dd20f34c695b885a39487ba4a7"], 0x110}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) 02:25:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x76, 0x0, [0x200000000, 0x0, 0x2, 0x100000]}) 02:25:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x400000, 0x0) 02:25:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x3401409f2ebd9dab, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000100)={'ip_vti0\x00\xff\xff\x00'}) write$input_event(r1, &(0x7f0000000040)={{0x0, 0x2710}, 0x3, 0x7, 0x5}, 0x18) 02:25:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40000, 0x0) 02:25:44 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400, 0x0) r2 = getpid() write$P9_RGETLOCK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="260000003701000108000000000000000400000000000000fed81a97af8beac43e7bcc659a2c7ee6e2b2d7a52b483b91c4cd8eb0719bcea44ac1e7d522dd16c8e386daa536a0096e6da76c0c147c09281e5d4dbf9f9d5122eebafc9821d15b259df1aa", @ANYRES32=r2, @ANYBLOB="08006d6435171f6d282c"], 0x26) sysfs$1(0x1, &(0x7f00000000c0)='\x00') r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000b07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 02:25:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x551f, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0xffffffff, 0x3ff, 0x1}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 02:25:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000240)={0x0, 0x0, 0x2080}) close(r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/cachefiles\x00', 0x10000, 0x0) getsockopt$inet_buf(r3, 0x0, 0x2d, &(0x7f0000002300)=""/98, &(0x7f0000002380)=0x62) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x504, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5f8, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000005) 02:25:44 executing program 2: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x90, &(0x7f0000000380)="c4d31afba96a1769a102e430ce01aecc3fefdf672237f81827af1978e920866e1140155f32bef4320b3aba4cdf90b4b0cf07bf4b1c9f13481eed42a77a2a008d7db1316394acd64c823c2e94064329168c362d437644c070b45c164f55b9da94a8bf1e16577df834db5849a700a8154920b09fd8f9f150a76f4460668bdad56444bd0291fcc48241b775e88562bac559"}) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x20) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)=ANY=[]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x3) 02:25:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/uinput\x00', 0x805, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0xe0c, 0x3ff, 0x40, 0x2, 0xe, 0x8, 0x3, 0x38, 0x4}) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [], [], [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1]}, 0x45c) 02:25:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) close(r0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="48e32616b19ee78e831da925d71403fc30f6581188b19ba7862f0e674ac582ed1d2879b437db503360097b0915bbf035123522f7a00e13b30765718685bed0327044b1c252c5d9ab98b2b776b3d9bd6809ce7e296cda5e6bf4c5c983e5bf8122ada0729fcfa168f70d6cf0f26918bdcfc3f2881f0e3d3235a4a05b78ff1f9411828ba4426241b5a1a65ed47464df657c0cdb2a0b3d26cd7012e0d481740149635ba6354417baec957863364eaa4022e75a1fe61ee834108c8885f1a18870e59fbfc45e838637e64017ee41fba70d9f98b9df4f19bc627cd2cf86a9e9668f5cf838de91a9f0ee", 0xe6}, {&(0x7f0000000100)="e9e516e5414210b0baa91c8f6217266db5860983", 0x14}, {&(0x7f0000000140)="25715692e4e466375eb600410e40110cb5d7eaa3746f6255b8", 0x19}], 0x3, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0xffffffffc31ed9a0}, @iv={0x58, 0x117, 0x2, 0x42, "a039d87d7d9c8c7a4c4783e1bd4908e48cd76944d0b5a1b91fe5e4b8f0122828d44c48d4ee8485027d16afd93e76e21f7d752aef19a01da7b48788f3b6e407445603"}], 0x70, 0x4004000}], 0x1, 0x1) [ 377.059338] input: syz0 as /devices/virtual/input/input11 02:25:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='syzkaller\x00', 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0) 02:25:45 executing program 4: socketpair(0x8, 0x6, 0x1f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x256a, 0x8, 0x401, 0x200000000000}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000520000002000068e000000100000000000000000800120002000200000000000000000030000000020300000000000f000000000a0000000000000092ab000000000001020014bb000000000000000000000000030005000000000002000000e00000210000000002000000"], 0x80}}, 0x0) 02:25:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r4, 0x10001, 0x7, 0x5, 0x1f, 0x10001}, &(0x7f0000000180)=0x14) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) sendto$inet(r0, &(0x7f00000004c0), 0x21d, 0x0, &(0x7f0000000500)={0x2, 0xfffffffffffffffc, @dev}, 0x10) listen(r0, 0x7) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x40000) ioctl$KVM_SMI(r1, 0xaeb7) 02:25:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='syzkaller\x00', 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0) 02:25:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:45 executing program 4: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)) r0 = dup(0xffffffffffffff9c) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x40800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x4000, 0x848, &(0x7f0000ffc000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000004c0)) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/96) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100)=0x8001, 0x4) 02:25:45 executing program 2: unshare(0x5ff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x102001, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x1) ioctl$KDGKBLED(r0, 0x80045105, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 02:25:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80800) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = dup2(r3, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000900)=[@increfs, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 02:25:46 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000240)) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x5}}) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x8, 0x38415262, 0x1, @discrete={0x7, 0x83}}) r2 = dup2(r1, r1) getpeername$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x7, 0x1, @stop_pts=0x7}) 02:25:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 378.382966] binder: 12496:12498 got transaction to invalid handle [ 378.389376] binder: 12496:12498 transaction failed 29201/-22, size 0-0 line 2896 02:25:46 executing program 3: unshare(0x20200) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x42) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1ac, r1, 0xa, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x53}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fa}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20048004}, 0x2000804f) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@host}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) clock_adjtime(0x4, &(0x7f0000000400)={0xfffffffffffffffb, 0x401, 0x6, 0x7, 0xfff, 0xc88, 0x1400000000, 0x100, 0x9, 0x80000000, 0x7fff, 0x0, 0xe0, 0x2, 0x78f2, 0x8000, 0x1, 0x401, 0x4, 0x100000001, 0x3, 0x7, 0xfffffffffffffffe, 0x100000000, 0x9, 0x7f}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='cpuset\x00') preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x10ef}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x9}, &(0x7f0000000500)=0x8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000680)={0x1ff, 0x0, 0x201f, 0x2, 0x1, 0x0, 0x6}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000540)={r3, 0xc8, "06c8755693def3f25c8c192b0227692b2304f0d9513e97ce93ad5ab1a966d1d8870a88c4096dff2074e2ccad674b820753ace8b96f35773ad8437f5e2c80da3ec9c55ea821b855fa1f90188fb65eebdc47bea67dc702235d26db314849c3669bc772b968b1195c9f500fbc2a3824b8f1a872939830ed15fcaef8bd604c278ef75fd77f979dca0f3c862e6581b3b31a80c239ea35db52a79cc283ef9ccff438645e939a624ce32cf9afef7a181cc72cb5bdd590b195ce46ef419999b1de0d3ad7922679fc04fab312"}, &(0x7f0000000640)=0xd0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xb98, 0x400) getegid() 02:25:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}], 0x400000000000163, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x54, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0) 02:25:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:46 executing program 2: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751a", 0x91) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="a25ba246ee4fb0347eb703a2cdef0ee4c45cd244face307b1db75acb8a99986cd666df50eda5d7141ffec7533854d2b5e852bbd67049e778002307cb5b40e9220119e3b058a781469da1aecea1ed17289f764f2e267c5c55a9e913e9f99eaf26622cfbb260583ea850bedae9d84727f2b1d452d0e7d1a8e7a462921f18d008d800200f78aea01ca05bf564e5746a6811f45343e6b5c62f030b494db165b52e28ea22cf0bb49f9799bb18e180174d0bc19c", 0xb1}], 0x1}, 0x4000084) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:25:46 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/144) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001140)={0x12, 0x1000, &(0x7f0000000140)="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"}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000001180)) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000011c0), &(0x7f0000001200)=0x4) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001240), &(0x7f0000001280)=0x4) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000012c0)='\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000001300)=0xfff, 0x4) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000001340)={0x6, 0x6}) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000001380)={0x8}) r1 = signalfd4(r0, &(0x7f00000013c0)={0x8000}, 0x8, 0x80800) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001400)=@assoc_id=0x0, &(0x7f0000001440)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001480)={r2, 0xf}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001640)={'yam0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xf, 0x6, &(0x7f00000014c0)=@raw=[@ldst={0x2, 0x1, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x80000000, 0xd, 0xe, 0xa, 0x80}, @call={0x85, 0x0, 0x0, 0x2a}, @map={0x18, 0xf, 0x1, 0x0, r0}, @jmp={0x5, 0x1e, 0x5, 0xa, 0x4, 0xfffffffffffffff8}], &(0x7f0000001500)='syzkaller\x00', 0x6, 0xe8, &(0x7f0000001540)=""/232, 0x41000, 0x1, [], r3, 0x6}, 0x48) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffff00}) r4 = syz_open_dev$sndpcmp(&(0x7f0000001740)='/dev/snd/pcmC#D#p\x00', 0xff9, 0x2000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001780)={r2, 0x200}, &(0x7f00000017c0)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000001800)={0x1, {0x77359400}, 0x80, 0x1}) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000001840)=""/66, 0x42}, {&(0x7f00000018c0)=""/24, 0x18}, {&(0x7f0000001900)=""/243, 0xf3}], 0x3) ftruncate(r1, 0x3) fdatasync(r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001a40)=0x8, 0x4) fcntl$setsig(r4, 0xa, 0x2a) lsetxattr$security_smack_entry(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)='security.SMACK64IPOUT\x00', &(0x7f0000001b00)='vboxnet0[\x00', 0xa, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000001b40)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002d40)={0x53, 0xfffffffffffffffb, 0xea, 0x2, @buffer={0x0, 0x78, &(0x7f0000001b80)=""/120}, &(0x7f0000001c00)="87b820baca6afe9fb486898c328c3d57bf989e85826ed81ec082a5c894e8a09a8e63d7df2f6fe7ce8f6597adbce53da397b47786f44aa86eccbef4d3dc62488063f50cd015bf3e8f51b3505059b46502f0aef2649f160dc5f7f029f61db4fb081978767e0be80036c03a8ca0e75cae35efc8ec5bf2b4f254f6222f977952ea0c2eae227d842beaba7f9c183d1c276cf1c4d87edb0de4d81c81e65e88046526b30aa7a4be986fbf2fa97cbf9f06e3537a0172ced6da334705abb59a7445b6455c4613603d0eb0a140351d61c339c430c73da5b778cb7e98e1d83f0a674ce2165ce82e3d91feab9d5f430f", &(0x7f0000001d00)=""/4096, 0x65c52873, 0x1, 0x0, &(0x7f0000002d00)}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000002dc0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x58, r3}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000002e00)) [ 378.759120] binder: undelivered TRANSACTION_ERROR: 29201 02:25:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 02:25:47 executing program 4: unshare(0x0) link(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x20}, 0xf) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000ffeffffe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:25:47 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x10000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) close(r0) syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xb913, 0x400000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f00000002c0)={0x0, {0x1003, 0xd69}}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0xa080, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x240003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECUREBITS(0x1c, 0x22) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 379.385179] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:25:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:25:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x3000000}, {}, {}]}, 0x108) 02:25:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x800000000115001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0x80000000) r3 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) accept$alg(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 379.634295] binder: 12552:12554 Acquire 1 refcount change on invalid ref 0 ret -22 [ 379.682346] binder: 12552:12554 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 379.690072] binder: 12552:12554 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 379.790090] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 02:25:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)) 02:25:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) [ 380.309135] IPVS: ftp: loaded support on port[0] = 21 [ 380.417427] binder: 12552:12583 Acquire 1 refcount change on invalid ref 0 ret -22 [ 380.460286] binder: 12552:12584 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 380.489349] binder: 12552:12588 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 380.599438] chnl_net:caif_netlink_parms(): no params data found [ 380.665886] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.672469] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.680247] device bridge_slave_0 entered promiscuous mode [ 380.688869] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.695749] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.703867] device bridge_slave_1 entered promiscuous mode [ 380.732159] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 380.743125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 380.767580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 380.775995] team0: Port device team_slave_0 added [ 380.782339] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 380.790370] team0: Port device team_slave_1 added [ 380.796630] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 380.804560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 380.866347] device hsr_slave_0 entered promiscuous mode [ 380.902583] device hsr_slave_1 entered promiscuous mode [ 380.933092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 380.940693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 380.977704] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.984329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.991545] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.998231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.068369] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 381.074580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.086869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 381.097856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.106133] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.114552] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.123964] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 381.141275] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 381.147452] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.159172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.167312] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.173859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.193381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 381.201468] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.208005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.230434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.239735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.266840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.275616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.284004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.297344] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 381.303428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.324632] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 381.339566] 8021q: adding VLAN 0 to HW filter on device batadv0 02:25:49 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 02:25:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @empty}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)=@getsadinfo={0x1d8, 0x23, 0x200, 0x70bd25, 0x25dfdbfc, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @coaddr={0x14, 0xe, @in6=@loopback}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@loopback, 0x4e22, 0x9, 0x4e22, 0x1000, 0x0, 0x20, 0x80, 0x62, r3, r4}, {@in=@broadcast, 0x4d6, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x29}, {0x100, 0x791, 0xa4, 0x1f, 0x109b866f, 0x2, 0x9d, 0x3}, {0x9, 0x4, 0x401, 0xffffffffffffff81}, {0xfffffffffffffffe, 0x3, 0x7}, 0x70bd2d, 0x3500, 0xa, 0x0, 0x6, 0x2}}, @replay_thresh={0x8, 0xb, 0xd89}, @algo_crypt={0xb0, 0x2, {{'ctr-des3_ede-asm\x00'}, 0x338, "4a89012e69e1ed12579f67bd61e54b85cb710c480f4554ef972b0029577be287d9ed989affd8102aaaec866f783430a418379ffa5e6c25c172062ecee1febf4e3962ea200026c7b08bfa5f40eb871ece4bf217ab9f8d90f2afc1e1e5cbb03fdcc3bfad23a0eb85"}}, @lastused={0xc, 0xf, 0x9}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4001ff) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:49 executing program 1: r0 = dup(0xffffffffffffff9c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2c0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x24020400) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(r3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) 02:25:49 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xffffff96) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x3f00000000000000}, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:25:49 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="fb"]) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000000c0), 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 381.622426] hrtimer: interrupt took 32448 ns [ 381.668201] *** Guest State *** [ 381.672043] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 381.680929] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 381.689969] CR3 = 0x0000000000002000 [ 381.694402] PDPTR0 = 0x0000000000003007 PDPTR1 = 0x0000000000000000 [ 381.700937] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 381.707530] RSP = 0x0000000000000f80 RIP = 0x0000000000000001 [ 381.713664] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 381.719714] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 381.726489] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 381.734605] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 381.742715] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 381.750739] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 381.758862] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 381.766946] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 381.775042] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 381.783205] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 381.791225] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 381.799318] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 381.807392] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 381.813947] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 381.821437] Interruptibility = 00000001 ActivityState = 00000000 [ 381.827824] *** Host State *** [ 381.831084] RIP = 0xffffffff812fec40 RSP = 0xffff88803bd7f3b0 [ 381.837220] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 381.843737] FSBase=00007fbfbc4b6700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 381.851721] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 381.857649] CR0=0000000080050033 CR3=0000000039453000 CR4=00000000001426f0 [ 381.864851] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 381.871735] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 381.877815] *** Control State *** [ 381.881307] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 381.888177] EntryControls=0000d1ff ExitControls=002fefff [ 381.893772] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 381.900738] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 381.907538] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 02:25:50 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) stat(0x0, &(0x7f00000027c0)) getresgid(&(0x7f0000000580), &(0x7f0000001640), 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)="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", 0xcd4}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)) syz_open_pts(r2, 0x0) ptrace$getenv(0x4201, r0, 0x80000003, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 02:25:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:25:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x1, 0x0, @pic={0xcb, 0xa77e, 0x3, 0x4a, 0x5, 0x200, 0x0, 0x1, 0x7fff, 0x2, 0x101, 0x3, 0x13, 0x5, 0x0, 0x3}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 381.914214] reason=80000021 qualification=0000000000000003 [ 381.920567] IDTVectoring: info=00000000 errcode=00000000 [ 381.926166] TSC Offset = 0xffffff2f7605f481 [ 381.930522] EPT pointer = 0x000000003870e01e [ 382.136902] protocol 88fb is buggy, dev hsr_slave_0 [ 382.142455] protocol 88fb is buggy, dev hsr_slave_1 [ 382.892511] protocol 88fb is buggy, dev hsr_slave_0 [ 382.898248] protocol 88fb is buggy, dev hsr_slave_1 [ 386.335993] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 386.347389] clocksource: 'acpi_pm' wd_now: 9b9ff7 wd_last: aee3e3 mask: ffffff [ 386.356827] clocksource: 'tsc' cs_now: d3153749ff cs_last: d0c307da96 mask: ffffffffffffffff [ 386.367397] tsc: Marking TSC unstable due to clocksource watchdog [ 386.374373] protocol 88fb is buggy, dev hsr_slave_0 [ 386.379821] protocol 88fb is buggy, dev hsr_slave_1 [ 386.387438] protocol 88fb is buggy, dev hsr_slave_0 [ 386.392912] protocol 88fb is buggy, dev hsr_slave_1 [ 386.423619] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 386.432647] sched_clock: Marking unstable (386482042065, -58446187)<-(386548181545, -124585930) [ 387.138660] protocol 88fb is buggy, dev hsr_slave_0 [ 387.141344] clocksource: Switched to clocksource acpi_pm [ 387.144159] protocol 88fb is buggy, dev hsr_slave_1 [ 387.155122] protocol 88fb is buggy, dev hsr_slave_0 [ 387.160547] protocol 88fb is buggy, dev hsr_slave_1 [ 387.166358] protocol 88fb is buggy, dev hsr_slave_0 [ 387.171879] protocol 88fb is buggy, dev hsr_slave_1 [ 387.179096] protocol 88fb is buggy, dev hsr_slave_0 02:25:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xffffffffffffffff) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:25:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r2) socketpair(0x10, 0xa, 0x9, &(0x7f0000000400)={0xffffffffffffffff}) accept4$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x10000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@rand_addr="b1ba95b24e3b9f9ade27fce9faa88033", @in=@empty, 0x4e21, 0x6, 0x4e23, 0x80000000, 0x2, 0xa0, 0x80, 0x6c, r4, r5}, {0x6, 0x8000, 0x7fff, 0x1, 0x3, 0x2, 0x8, 0xfffffffffffffff7}, {0x2bd, 0x8000, 0xb25, 0x2}, 0x7, 0x6e6bbb, 0x1, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d4, 0x3f}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x34ff, 0x4, 0x1, 0xff9, 0x1, 0x80008, 0x8}}, 0xe8) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/btrfs-control\x00', 0x105800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000000180)={0x80000000}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, &(0x7f0000000380)={0xfffffffffffffeff, 0x7, 0x7, 0x7fff, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xb2a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, r8}}, 0x30) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 387.184733] protocol 88fb is buggy, dev hsr_slave_1 02:25:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x48) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x4000, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4500c0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000280)={0xfffffffffffffffa, 0x100000000, 0x0, {0xa, @vbi={0x3, 0x931, 0xe000, 0x7a735773, [0x5, 0x8], [0x6c89, 0x7f], 0x2}}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x76, @rand_addr="9d62a37037ba20cd18e11700c3edd6d1", 0x100000000000000}}, 0x10000, 0x338, 0x0, 0x6, 0x8}, &(0x7f00000001c0)=0x98) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000400)=r3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000200)={r6, 0x3}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:55 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 02:25:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xffffffffffffffff) 02:25:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff80086601, &(0x7f0000000000)) [ 387.562833] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable 02:25:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="ff0f00000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e220000000000000000000000000000ffff0000000601000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000000000000000000000000000ffff0000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000008fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000008ff01000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000009ff3ea8098c3f3d517f73679d050d5a51b30f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x310) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f00000002c0)={&(0x7f0000000340)=@canfd={{0x4, 0x100000000, 0x8000, 0x190d}, 0x25, 0x3, 0x0, 0x0, "854ee2a373745b940f7b1d6008959d26c896d956c0b8d6107e00271630de6d19356c944cef59b18dae5baddf476bdc61f794c7a7f03da9bea44ec0aef5b22ea3"}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008000) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x600, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = getuid() r9 = getuid() r10 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xffffffffffffffe4) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xcc, r12, 0x820, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9fde, @dev={0xfe, 0x80, [], 0x11}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000015) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000880)=[0xee01]) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000ac0)={0x5, {0xb7bd, 0x4, 0x7ff, 0x2}, {0x1, 0x289c, 0x1, 0x7fff}, {0x1, 0x2}}) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010004000000000002000500", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000500", @ANYRES32=r10, @ANYBLOB="02000300", @ANYRES32=r11, @ANYBLOB="02000100", @ANYRES32=r13, @ANYBLOB="040001000000000008000700", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r16, @ANYBLOB="08000200", @ANYRES32=r17, @ANYBLOB="00eb0700", @ANYRES32=r18, @ANYBLOB="08000600", @ANYRES32=r19, @ANYBLOB="08000200", @ANYRES32=r20, @ANYBLOB="10000200000000002000060000000000"], 0x84, 0x3) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:55 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/snH/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 02:25:55 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 02:25:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x42, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$inet_dccp_buf(r4, 0x21, 0x80, &(0x7f00000000c0)="2f0f5c6813aea456ab668f94ebe1fbdabd20118469168f3159fccbea6f408c595f084d6445dfc422d35821f80d7b827a57c74a14cf65ebe06a7a2f1c8a09d616784c4db9af8add66b34168abe97ee50d0357f9528cc3ea14639de454a16b47850f1bd2ace93bf0c9f5526775c56dfae770bb027fff80856193a63d03a6cb596f54ce99d53c727226d18e4a4e098ddc39bf6d518fc097cc7643e02c2c4bcc77899d3d067abeb69493289097d27566167e70f9898913abc27ecec7f26ec1d28f68868343554184190f2f6ae0884ebec6e7fa4d07f78c1ee93b581d2c1ad9077428cf1cf6065defa44afa8b7b06d54ca855c91c", 0xf2) 02:25:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) getresuid(&(0x7f0000003780), 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) 02:25:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc"], 0x4d) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), 0x0) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:25:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_adjtime(0x3, &(0x7f0000000100)={0x5, 0x80000001, 0x1, 0xffff, 0x87, 0x20, 0x7, 0x25e, 0x4, 0x400, 0x8, 0x8001, 0x2, 0x2, 0x6, 0x8, 0xffffffffffff1e32, 0xd7, 0x8000, 0x3, 0x4, 0x7f, 0x5, 0x7f, 0xfffffffffffffffb, 0x40}) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x2, 0x2, 0x1, 0x401, 0x5, 0x100000001}, {0xc0000001, 0x9, 0x7, 0x8, 0x34, 0xf3d, 0x2881}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) mmap$xdp(&(0x7f0000021000/0x3000)=nil, 0x3000, 0xb1e48899d9d93363, 0x2010, r2, 0x180000000) 02:25:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xfc) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:25:56 executing program 2: socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xa102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) 02:25:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 388.624484] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 02:25:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 02:25:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x10000, 0x1000}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r5 = request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000280)='/dev/udmabuf\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10001, r5) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) r6 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f00000000c0)={0x6, 0x1, 0x9d, 0x10001, 0x2, 0x9}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x4486, 0x425, 0x992, 0x6, 0x2, 0x0, 0x5, 0xa0, 0x7ff}, 0xb) 02:25:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) 02:25:57 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x1000, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000180)={'caif0\x00', {0x2, 0x4e23, @multicast1}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:25:57 executing program 2: pipe(&(0x7f0000000380)) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 02:25:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a", 0x4) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="c4"], 0x1) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x30}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 389.428784] binder: 12750 RLIMIT_NICE not set [ 389.433604] binder: 12749:12750 ioctl c0306201 200003c0 returned -14 02:25:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) dup2(r1, r0) 02:25:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pivot_root(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001340)='/dev/kvm\x00', 0x30000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000033000/0x18000)=nil, &(0x7f00000013c0)=[@textreal={0x8, &(0x7f0000001380)="f2af660f3a633000440f20c0663506000000440f22c0dcf6baf80c66b847db318666efbafc0cecf20f2a5306660f3a0cc5002667f32e0f07f4f260", 0x3b}], 0x1, 0x5d, &(0x7f0000001400), 0x0) close(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x408c02, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001200)={{{@in=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000001300)=0xe8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001140)={r3, &(0x7f0000000100)="afdf3c9d7e77bde4e780f62d940f07472d388afd01205dfe0082ba0b779e176d6341f22be4c33dc138628381213bfab9e9b063448f191bd96c92b80231472095fcd644f1003328abb324146da42da35a2f615bc56b61828c9332e7421004ebf64df7676dea6c7915b11eddb17013007ac1a8f95767cb6b009d83f44a5532ad4f6d55182d54d8080383c33af49c24994f376f42a4f691c3e5b9ee4387c00723d12802d292f00fc687f656213e35f1afa5bbf67566ae6a4494e879f72a953aaa3215dd0468dc199a9a6492146ca54b3041178bf1fdbb0e5abdc32aed139b039c23d4fb8a99ac0c377a4e62c8cf1acb37a6bf162ee9240d5d82a8a13bd1563f86d9e318b6cb548f0eb9ae7db01afe5a67999f39077c91568a450217f14c233651c071ab27fef0e27432abad0645a58ee4990e8c419e5b25bda4e9684166e60c33b7dd4aa83c84de69c240203371c6f62ee4ea83a6b41e57580edd2688cc0e12142583dbe75d386c54027e4450ebf7fbdb1fb21f8a1c54871be4ca06f629e7ecf2a82728f12042c47a18c9a620f601406e7d456a9fad631d22165de0561565244f5bce79f2b2f79f3a80166ff6646e0ae0f0975ef6e74cb6fba00453472e53215d92e13d92c47de3c915f5bc704667f8f719fded2db437de60c406632a889a3e8a31e2cfc4bb6dea435d6a6d7832e1f344659037041439f80e4877f5905b9fdcfde458d17b4ec1f40634cc011c3d1ada4fc016b9e35231d45d7d1e5b83a4b958bc39c1ad4c436747ac6b9413b52374a7411afcdf7d57f5fdd4f87039e3d790068d2568b7abcd6875a111293eb3f950c020fb91f8b2fe036878b3f322daa9773210dec32620252cdc3c3f8ed3541ddc155a415e0ed8e87e966a5484384fc7890f693e61a44a6fe0914953464e871764e2a5dc588b6d81395e9de6aa81a9523d22d56a538a5c9fe08bc8d63a724dfa43097f7fbc293f5e14792cceb3feb206695a012ee8ffcbe054c6cbacbfe105b741549b1f3ada94fa8fe8e36798e907c6781547656f151a828d40e1e4874058c7ad338ec1a12573ba4c30cffd4baef5393a05c46d6862caf524007f049f9834c54d4e82b9dbce3729b90589eeaec42bb278c50d659d1a22c06bcb6fc21032c728f0e999d3c5b3ab0752c1046f968227512611cb151686792a632d78225b3809fda3c7ac4c3b97a0d0dbc6f749b2650f0a38d69a041347c3068e11222731a33cd804dfccb017cba2b27bb6213f577f2077542ed5ccec850dc8caf3c816018a7ef4566ea877cba242a6949e3633bc88b46e23979a832701c7f25fa320dd06ddf36f496b06c0eefa3f7af7389aa5fcc33e5b0d572f035ba38777cb697baa1203e9a9024479b34e731c20686faa96b3b50aeda434fcc3482cfbd6be0a00ad0db9e00906e7938ccf0ec37d9faf563fc4de55beebfd8f5d3a94d86a5a87b1e66c411364431bf65bcb5e4a17ab20a08458e6c788e7aae063f66d92b40c831b7fab1e0b93aa70de0a52cbcf5a9ecc9075253abb61677a1b7ca2896e19f1951e6fdc0eb509446b765b4d1a9bb2227276ef18eb94a8d9a1ac051db6e661c5e1fac44acea32ae48897b0bef79af5dbeb8f4182b448f631c0198d5e630f09f92722b6530ca3941f9548d2ab6add02c69feb3950e5620efae493112f7770ab1b36af5f717081052e44922b7bd9ffcb5bd8571300e1876ba25949c9e60f206b563478287951e11b7167988d11338c050e36bd00e262cb73b96b83da5799e2fcb1b2c3f1e53bcd6ecf4911554fb5ad35355bf0aa2fb70b1e2bdc51e7162baea309678691b111d999c76a7c4b867af3ede4865564e41e487cbe4449df5a973f9edd77cd60665e9e09dc82ca1a3e8a67229df0eab369b3e583a9f1d54e206d4d5c9a80b018b57d026895f63bbda21643ba49c192691dd247f00e09d8dfbe170fc0b2a27715884cb0e1f75c5a88d354e09f674ed0a98976811beff2ed34cbe0b805c14aad9f744add38dfcb93de40096b61cbfe96b8387a5dcaa5eaaa5f59249440303ec1467159e206d6a730cea8cf474b71137f61c5807ab9dcc948a6723fe08ddc7d0088b73dba8b4b6f0a619588c19b227873d0a89ac83549463385131efc57f8d64cbf8b605621e161e34e7c993f779ae8e580799aa9f1066acc385616a70cd85539f78822265489319c40e155a5a6dca30d8354f06de6f0f76dd7ef0ef2be565f306868cec84bc137f8985277b7a80e870e8015714b433ed94612463961252c9e9df76c49bceb6a3c7ea45de3ebec0cf0c075f60b3ced65245376517a819e42fba7ffab30368b0b0465a33e082fbbe05326cffc50d4978cd7bf50f56509ec2282ce7bc794092b8bcefd40009b3b57d251bfd3da2fab45b2fb483667af225df7ea6e73c7ee83a2351c45f779f4d6b7b3a62dda310602bca782ac4e858e310c2d6cd8ca3068ab5e417379069e0c34bc796cbe823dff33eb4b64fd68c5a492bbc3442ec7dc4b2ee7cb9219dfeff021c2f6e40f9da4ed6e5105747212c5ec455bad494856f0fa9fd8359895481156e102e52f693ad80f8ec9aed3fb824f01c1fcdb55cc87d4360bde4d89857f0b7b1400f4136013ca334181b745124f313473695ad279f3bbe2e01b8c4f2e95c8f36f96811d49cdaf7867e7c7bc2395d00b87f55492817187cfa40358e270daf04567652497608c1ef4adf5d055e3c03b7da60c33adb38d2d9b59b11a56f2fedb5d87a7dd0c36372eac18b21d611c1ead4df8d5d783697551dc98413bedb8ea4cab696c1e8a548b450fde91ac0dfc030f89b5895a2abbb626e2e7f919010b7fa3652e985afd156140b1839a512fa845e75612f506270c32cc1a3713b7df433e7131065eb95afd67413a16d4d276f1720384315100b72a81f787f344f836421be20d38b76e2dab0dd76ab47ca17d3f0887f2e3be80e5b72177929ada38b835900b109de4744f2575219c6b5525810f989e08d30cd741d3eb74215522e39a948fe970ac0d513f52f28d65d4e685598785ac6f0047ecbb14d1efd5ccf11964fc05eb76b263986116d662f4b695fbc6ba60e9e303bdc55500c85ae63f6e2dc8ed3537f226b594412dc9fe79de978a616938383d83b4457b04a380ea9883ee9c067901983a05c697f860808dc9fe668f630a64ce49ab67c689ffbc7c9be99611b13a0c3e4595dd81f9b806fb7a74d1d85201e4ad51501b2878ddf64adc0f694e6fa8e022ade547c6fae6627860ea0eff15abed948efd4828cdc555c4dd4bf1186e6b67da3ce4f82e925c87fa449bc7a485c8a91319652447f8db7582c9f6ef1b84dd14bcae5d2b3f68f520ab7ee63e3520fa359ecc6029a21602c14f8437e73e60ff88bfcac9f1e6de78d8e2725b9656ad5a7c2ecb5957999643ed2d3d097f1aa299db8e72e57755f5ede07e9f7ac514e64c06ac728db965e8ea0c6ed3041f8046c6dcfde3f7d12568cbfc9c68f6b43f181e6aaa5c80870d34e9acdf946be7b9f6312ca7d405d18f48b31be8d2603f1231d685898e8e9748097f2f259122e0d66a544fcc336e43c753a8f369716b3f7ad1ecb7b34b7842910e275460ad94cac3d72e5e6c552f5d5160a78a0efcfa70856c1df5d9f88569b03b4cc2faba9bd7c7ea62575700ad889cb313d433558959ed1c7df41c64960eb4e4b83f6ff35d9cd224292dd8ac74623aa9398cf91d1a2597606b3427b2b5843771341058bf35c58274922b3bfc86bb260a573dd72457add9b16484b911cb811b68d6ffcc276b92d9718f67b4e63a8703a76eada1a9df87be222a8cbf4cf3cb2f766c7f7b58d733faa5f25da491e7dddeda098778c3f8852e18e4ceaf09bb38a410dcec51bf4b9148ce028f17b8aec0da00c24f80c51ac56f3ea2a12cefc0c0e6603889e8d9ebc43c171c4c38ed26f0ae1f6b74e5ba8de99b3753375289f9c34490ae8e33d89e342cb008dfde68e0b9705a0da132f737f533fb106be2209aaa62f5e0922391eb9677ff6eb630debf1d6210bcda8cf9202b3bd14e30a0036874129c70906f1dec9a0a2728bc3ab24117086cebb4b9e3c436efd309d67f29c79ddb189f83690986699540418ee20df97c7f1dd4ad7042ce35db2d6127ba3944ae89ec5f1b1a22156f1b44183ec09e09f91378f0d04467ef1017a11ba380190a827fde1df1769798fa0b9c37e63a1c783233249718fd61970d53f5db902905ba89f3e19c590bb0ab37e62da1a49878faa2171ce9bf5fad56a13ea24b315b701048571dedef8c8a44356709193013126616b5d340b628629e00ab881dc9bfc6a68cd8982bda47e9d90d2f6113501b4a5a1f2c0f8c4af7298cde4c4b1ab33b5ef0edee5a07ec359edff0ec6527b83fe7f22af31511c86483d1fdc84d84f844be760726e240e16cafd9f7958f211b640f4630c7ba90d901db5c666cf7dfdb07b2f5d22630c04b624eae870e1d32752bae8619fd82a2ad80647a0cd6b2361b876876aab8cbe0cf680c19951f3d84b82867c2e1629cc09271a47b038b993935a257adbddeccb85fc3a104c23440cff34ff47c442bb86b160e91bd305b77d15f98efa0afa46834efd733271981e620178dafc0e0934a1e737e625d85e94ab15bb664fa160aed1cb6e7ca3f2f12ce0aff1796f813efc5ca8e986b1103589195d87d07dd958c2252bc0f009598a59de5c25aa6a38567e21fa49e406f0726142fc35ad682ff2f09fbde0942bad5ac4eda326be91ecaeeb0a987b150634e2f8e0654a7ffa7d88a2b9ff9a250480e14e59abde56bae24269256269cf998752ee8c673a45ed38bc07549c3b2a00f881674d6bd44e86b662d33d1f3439a44e2831e881496c659e80fde15c63f6cfbf10c446966f94685d8bb74a66dc8883754676e6e25bb90dcd47ed22d30af5d3e852bb45673e7e46fb52aca80714388d8f3963d174e1c1792575cca3bd52095fb52709d06b36c926c1fcd7815a432a5680247e30ddb51d15d49ccf366389593d279ca028872f9c05e0d8ffabe601ed7da56d12d718a19211877f10cb6412631661ca08f78cff4f53910b9243a501da70ee98e812e0fc714309666033c2b5449785535c7b9c83b55789a1c19c95b8b5fe4f978f77f35a37b3276e7dba03611f685cb5748bf1a670e165cabcbe2c85c4050f39732af5a838bf787bc526c9e0f7506c8d64239e2bdff7dff9a4dbf40ed3f7e5cd33127121c35d55ac0341f0792228a3047abd6c8fb88f04cfe20a67a491069c33f913cad256f4eabbafb56121ca280cde48889d33402c0a38f0eac2e0b0bc4ab7c0a905e26dcb695e6eb15e3c0f210e611c8b343fca3318fdaff77bc399aa2d105a7b88d1ce33c24ebae487db04c3b8840cb9b354313b3bfe68d85d8dc11975e1304372bc9a67e3cd9475a820222990f97a121c17f9566432f5d23c5d3e362c19471ef11bf95a5de78ee14128344c090d0ae98bbbe87f5c4e18476ba8db2cf61a0e6226f2c356c838839d0b025cb8ff6c882f797cb9b8e213bb26939a222fadd5dec213d2144a3a37efd87f1c9f2d9f6917df40a0026115f6adcf70ade7f7d2cdc060593b840ffad08962bc983a8142babae6393fc3bffc30a6abbd157f671babf4dff7ec8a3617b779e1a49ca921e7ea8d94e2218d394753e1121f20bb517aeb6aafc2e31078d8118d9d25fcf1b94da1f53c8d5469242e3c8b7df587d04d493059add4909558c406defc5b728348cae156e0db1d4a1bbf798921b1006e8a1a2f6aff156c61fe8319213be35361b97c2136a781f0f385ca9065ab99d0adb162f4cafef", &(0x7f0000001100)=""/17}, 0x18) [ 389.501372] binder: 12749:12750 unknown command 0 [ 389.506583] binder: 12749:12750 ioctl c0306201 20008fd0 returned -22 [ 389.548827] binder: 12749:12761 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 389.620760] binder: 12758 RLIMIT_NICE not set [ 389.625548] binder: 12749:12758 ioctl c0306201 200003c0 returned -14 02:25:57 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) getresgid(&(0x7f0000000580), &(0x7f0000001640), 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) getgroups(0x1, &(0x7f0000002b40)=[0xee00]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)="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", 0xccf}], 0x1}], 0x1, 0x8000) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x4) syz_open_pts(r3, 0x0) ptrace$getenv(0x4201, 0x0, 0x80000003, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 389.680184] binder: undelivered death notification, 0000000000000000 02:25:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x100, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="080b2bbd7000fddbdf25010000000000000009410000004c0018000001ff7564700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x54) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:25:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:25:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 390.035212] binder: 12785 RLIMIT_NICE not set [ 390.039887] binder: 12782:12785 ioctl c0306201 200003c0 returned -14 [ 390.215042] binder: undelivered death notification, 0000000000000000 02:25:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @broadcast, "14bc9675", @link_local, "9878859120f8ed783814b2a8d90bbb58"}}}}, 0x0) 02:25:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr\x00', 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x4d, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x700) 02:26:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 394.613984] binder: 12805 RLIMIT_NICE not set [ 394.618712] binder: 12803:12805 ioctl c0306201 200003c0 returned -14 [ 394.667556] binder: undelivered death notification, 0000000000000000 02:26:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:03 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x24020400) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000000c0)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x17002, 0x0, 0x6, 0x4, 0x4, 0x2b26, 0xe2, 0x9, 0x4, 0x3, 0x2fd9}, {0x100000, 0x10f003, 0x3, 0x0, 0xfffffffeffffffff, 0x6, 0x9, 0x6, 0x7ff, 0xfffffffffffff468, 0xfffffffffffffffc, 0x452e}, {0xf000, 0x7000, 0x3, 0x8, 0x5, 0x5c9d, 0x80000000000000, 0x7ff, 0x9, 0x8001, 0x5, 0x4}, {0x4000, 0x0, 0x9, 0x1, 0x69, 0x3, 0x3, 0x20, 0x80000000, 0x4, 0xffffffffffffff00, 0x20}, {0x2004, 0x4001, 0xf, 0x0, 0x7fff, 0x1ff, 0x100000000000, 0x6, 0x3, 0x101, 0x401, 0x7}, {0x7, 0x4000, 0xd, 0x9, 0x6, 0xfffffffffffffffb, 0x1ff, 0x8, 0x2, 0x3ff, 0xfffffffffffffffa, 0x2}, {0x1000, 0x1, 0x8, 0x2aa, 0x6, 0x0, 0x9, 0x2, 0x80000000, 0x7e7, 0x4, 0x3}, {0xf000, 0x0, 0xe, 0x4, 0x1, 0x4, 0xfffffffffffffffc, 0x3, 0x5, 0x4, 0xff, 0x80}, {0x0, 0x100004}, {0x0, 0xf000}, 0x20000000, 0x0, 0x4, 0x410234, 0x1, 0x1000, 0x0, [0x3, 0x4, 0x1, 0xffffffff]}) [ 395.065861] binder: 12818 RLIMIT_NICE not set [ 395.070576] binder: 12816:12818 ioctl c0306201 200003c0 returned -14 02:26:03 executing program 4: 02:26:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @pic={0x6, 0x10000, 0x9, 0x20, 0x80000000, 0x5, 0xffff, 0x9c5d, 0x9, 0xd27, 0x9, 0x0, 0x80000000, 0x9, 0x7, 0xfe08}}) close(r1) recvfrom$rxrpc(r2, &(0x7f0000000200)=""/251, 0xfb, 0x40, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @mcast2, 0x9}}, 0x24) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 395.128368] binder: undelivered death notification, 0000000000000000 02:26:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140)=0x10000000, 0x4) 02:26:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$kcm(0x10, 0x100000000000003, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="230000005e0081aee4050c0000000000a30000ffffff9e76baf6b526776a6ec0ff0000", 0x23}], 0x1}, 0x0) 02:26:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001a40)={{0x2, 0x4e24}, {0x306, @remote}, 0x8, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000280)=""/211, 0xd3}], 0x2, &(0x7f00000003c0)=""/25, 0x19}, 0x9}, {{&(0x7f0000000400)=@tipc, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/158, 0x9e}, {&(0x7f0000001680)=""/77, 0x4d}, {&(0x7f0000001700)=""/97, 0x61}], 0x6, &(0x7f0000001800)=""/112, 0x70}, 0x5}], 0x2, 0x10002, &(0x7f0000001900)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0x1}) close(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x401) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x141600, 0x0) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001940)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x2, 0x0, "78e3b46dcc8f961000b7f314361ee2a97c2aace73b2bd76ae0ef7f63a339af2902a5b7871d8745d94cd499a583f61fd600053d8c97ca40302c297a208ba292dc738000771abe86f0e3f2052ef61e57f5"}, 0xd8) 02:26:03 executing program 5: syz_emit_ethernet(0x14, &(0x7f0000000000)={@empty=[0xe80, 0x0, 0x600], @broadcast, [], {@generic={0x8864, "42a703000000"}}}, 0x0) [ 395.653968] binder: 12837:12841 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 395.662806] binder: 12841 RLIMIT_NICE not set [ 395.667456] binder: 12837:12841 ioctl c0306201 200003c0 returned -14 02:26:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:26:03 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xffffff96) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 02:26:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:04 executing program 5: 02:26:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgid(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x4) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) io_setup(0xb, &(0x7f0000000100)=0x0) io_getevents(r4, 0xfffffffffffffffb, 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f00000001c0)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8040, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x40881) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x28, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r7, 0x6, 0x8}, 0xc) [ 396.073931] binder: 12863:12866 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 396.082844] binder: 12866 RLIMIT_NICE not set [ 396.087418] binder: 12863:12866 ioctl c0306201 200003c0 returned -14 02:26:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x100) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001200)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000001240)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000200)=""/4096, 0x1000, 0x0}}, 0x10) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000001280)) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000012c0)={0x2, 0x0, [0x3ff, 0x8, 0x8, 0x40, 0x7, 0x49, 0x100000000, 0xcc]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r6, 0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 02:26:04 executing program 5: 02:26:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:04 executing program 2: 02:26:05 executing program 5: [ 396.918300] binder: 12975:12976 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 396.927159] binder: 12976 RLIMIT_NICE not set [ 396.932016] binder: 12975:12976 ioctl c0306201 200003c0 returned -14 02:26:05 executing program 2: 02:26:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x10000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x61, 0x1, 0x2, "0839efd77f5450092e9b8d0b13b09638", "db84a9ea2bfc4f2b4f6bfb212580533aebf339da7b7cfcc1a0b5bbf8e0b987602ecf4ce9e99b6c18a5698baec5491ebd8924632f0bee81e3f6d5c05e5f5e6ef36a9d00121ea5561ed3284f11"}, 0x61, 0x1) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:05 executing program 4: 02:26:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x5, @mcast1, 0x58d5}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x1f}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @empty}], 0x88) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:05 executing program 5: 02:26:05 executing program 2: 02:26:05 executing program 4: 02:26:05 executing program 5: 02:26:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:05 executing program 2: 02:26:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0) 02:26:05 executing program 5: 02:26:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:06 executing program 4: 02:26:06 executing program 2: 02:26:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:06 executing program 5: 02:26:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:06 executing program 2: 02:26:06 executing program 4: 02:26:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:06 executing program 5: 02:26:06 executing program 2: 02:26:06 executing program 4: 02:26:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) write$FUSE_POLL(r4, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0x9}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:06 executing program 5: 02:26:06 executing program 2: 02:26:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x8, {0x101, 0x78d97421, 0x6ed, 0x6}, {0x1, 0x6, 0x87d, 0x5}, {0x3, 0x6}}) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:07 executing program 4: 02:26:07 executing program 5: 02:26:07 executing program 2: 02:26:07 executing program 4: [ 399.293059] binder: undelivered death notification, 0000000000000000 02:26:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:07 executing program 2: 02:26:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x3, 0xa5c2664}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:07 executing program 4: 02:26:07 executing program 5: 02:26:07 executing program 2: 02:26:07 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_buf(r3, 0x29, 0x23, &(0x7f0000000380)="bcf3a1fd77025b67fb3e933cc7064d99da7b158d209259f1bfcf25f3b4239d9f7cf5b7c4b5336f71432d34aa66af921ff91f2f068dfb7cfa49d44b6bdb8eb6b14ad9b5ff4dbe1b183396169c7f2e8181076a12d8d2c2a0cdd3060f5542e1942e2ddf", 0x62) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000540)) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000140)={'bond0\x00', {0x2, 0x4e23, @broadcast}}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000880)=""/148) sendfile(r1, r0, &(0x7f0000000100), 0x80000001) lsetxattr$security_ima(&(0x7f0000000200)='./bus\x00', &(0x7f0000000480)='security.ima\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000180)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=@fragment={0x3f, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x8) mkdirat(r3, &(0x7f0000000340)='./file0/../file0\x00', 0x20) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000500)=0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000080)='\x00>\xd2\x82\xf08\x81\x00\x00\x10o\xf2\x8f\xa3\xca}\x13\xb1\xe4x\x12\xfc\x87\xad\xcb\x1a\xa0\t\x00\x1dI\x1c\x88\x9d\x06@\xec\x7fZ6e\xac\xf3\xc6', 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000005, 0x32, r5, 0x0) ftruncate(r5, 0x8000) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 02:26:08 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 02:26:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', &(0x7f0000000100)=')&posix_acl_access@::\x00', 0x1be, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x100000001) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x800, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x100) 02:26:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:08 executing program 2: [ 400.462668] binder: undelivered death notification, 0000000000000000 02:26:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x16040, 0x0) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x42) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) write$eventfd(r0, &(0x7f0000000200)=0xfffffffffffffffb, 0x8) 02:26:08 executing program 1: syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x400902) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@empty, @in6=@initdev}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) fallocate(r3, 0x20, 0x4, 0x101) 02:26:08 executing program 2: 02:26:08 executing program 5: 02:26:08 executing program 2: 02:26:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$kcm(0x10, 0x100000000000003, 0x0) read(r1, &(0x7f00000004c0)=""/165, 0x97a6) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="230000005e0081aee4050c0000000000a30000ffffff9e76baf6b526776a6ec0ff0000", 0x23}], 0x1}, 0x0) 02:26:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TIOCNXCL(r4, 0x540d) 02:26:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 02:26:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 401.502578] binder: undelivered death notification, 0000000000000000 02:26:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:09 executing program 4: mlockall(0x400000000007) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x4) 02:26:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_open_pts(r3, 0x400000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 401.854389] binder: 13173:13174 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 401.888055] binder: 13174 RLIMIT_NICE not set [ 401.892798] binder: 13173:13174 ioctl c0306201 200003c0 returned -14 02:26:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) 02:26:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:26:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x140, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000500)={0x0, 0x1, [0x2, 0xef, 0x42, 0x8, 0xe092, 0x2, 0x3ff, 0xfff]}) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0xa0000, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000004}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffff9eb1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7fffffff}]}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:26:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept(r1, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000280)=0x80) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close(r2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/dev/kvm\x00'}, 0xf) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000002c0)) 02:26:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:10 executing program 4: chroot(0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 402.273624] binder: 13190:13191 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 402.312313] binder: 13191 RLIMIT_NICE not set [ 402.317011] binder: 13190:13191 ioctl c0306201 200003c0 returned -14 02:26:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:26:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:10 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/bus\x00') mount(&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(0x0, 0x800000088040, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) [ 402.754890] binder: 13214:13215 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:26:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) recvfrom$packet(r0, &(0x7f00000000c0)=""/15, 0xf, 0x10000, &(0x7f0000000140)={0x11, 0xff, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x400000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 402.800803] binder: 13215 RLIMIT_NICE not set [ 402.805621] binder: 13214:13215 ioctl c0306201 200003c0 returned -14 02:26:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003080)=ANY=[@ANYBLOB="140000001e00452ff198031703001600"], 0x1}}, 0x0) 02:26:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xffffffffffffffff) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:11 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)={0x0, @aes256, 0x0, "7115b2d7004732f1"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r5) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f0000000080)={{0x2, @name="0e31cf3e1fc353427b6fbc243cc956904e61df38942e26aa40bb63798b75a6a2"}, 0x7, 0x10000, 0x7fffffff}) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000100)={0x6, 0x85e4, 0x7, 0x2cb0000, 0x4, 0x800, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80080, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xea42}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r4, 0x8, 0x5a, "7c0a41473e8919889e4ab14b6cdcfe16b820e80d9b1bca730fd6119275e9b04eabed8a085f81a5f915c27cbbe040e12dbda1dafc12033266a796c7c0f698be36f7c6aa1a327fd8151885b10b04e404fa586011ada8f43c1dc396"}, 0x62) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x8000, 0x0) [ 403.348951] binder: 13244:13246 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 403.400029] binder: 13244:13248 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 02:26:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40046304}], 0xfffffdfd, 0x712000, 0x0}) [ 403.744398] binder: 13263:13266 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 403.757948] binder: 13264:13265 unknown command 0 [ 403.763124] binder: 13264:13265 ioctl c0306201 200003c0 returned -22 [ 403.798020] binder: 13263:13269 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) socket$alg(0x26, 0x5, 0x0) 02:26:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) 02:26:12 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 404.139319] binder: 13275:13278 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 404.180175] binder: 13275:13278 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 404.203120] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:26:12 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="26ae73272799f29c352fd00e000000000000002d0047b42de9066b66db683bd7dce00244046830d7a2d51f36bc044926e4a5bdfb95a79f7ce7"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x100080000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) tkill(r0, 0x220000002b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xa62a, 0x0, 0x9}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 02:26:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x903, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x40000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f00000000c0)={0x0, {0x0, 0x3}}) 02:26:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x40000000003, 0x4, 0x4, 0x7cb, 0x0, 0xffffffffffffff9c}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d", 0x100000001}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000880)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000006c0)='3Q\x00\x00\xbb]\xf0\xb8\xcf8k$W8', 0x26e1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r6, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x15, &(0x7f0000000940)=ANY=[@ANYBLOB="4596ac7aff1199505b0630492a768b88b40cda95479762f1562280ae7688b9b2743745e0ea77e4b12af50b9fc1443480c30365b87da044980c4922f960f697756994d7b1c37114ab16173aabbba146314be703c38f65ef5becf88f17292c08b2041130006f9e888b6eb4801f000000000000003b08907bed08f7c988d1786611d3308053c8ad1ee70100010000000000386f3461b3f6cb68666eb083fa1f0000000000000000000000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1f, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f00000003c0)='/*cgroup\x00', r4}, 0x10) recvmsg$kcm(r4, &(0x7f0000001c80)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0xffffffffffffff7b, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f0000000a00)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001a00)=""/222, 0xde}, {&(0x7f0000001b00)=""/23, 0x17}, {&(0x7f0000001b40)=""/27, 0x1b}], 0x9, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0x7, 0x6, 0x9, &(0x7f0000000640)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x8, 0x3, 0x7fff, &(0x7f00000008c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000000, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0x0, 0x2}, 0x200, 0x0, 0x6, 0x2000000000007}, 0x0, 0x0, r3, 0x10000002) openat$cgroup_ro(r8, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x33f) ioctl$TUNSETLINK(r4, 0x400454cd, 0x20d) socketpair(0x8, 0x3, 0x541e, &(0x7f00000005c0)) openat$cgroup_ro(r9, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) 02:26:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = semget(0x2, 0x7, 0x8) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f0000000080)=""/22) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 404.520325] ptrace attach of "/root/syz-executor2"[13295] was attempted by "/root/syz-executor2"[13297] 02:26:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 02:26:15 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x0, 0x9, 0x7, 0xad]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x3f00, 0x0, 0x0, 0x0, 0x6]}}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000480)={0xffffffffffffff00, 0x6}) setsockopt(r0, 0x8, 0x4, &(0x7f00000004c0)="923581e940d93f5381686c4c", 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x0, 0x3, 0x0, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r3, 0xfffffffffffffff7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r4 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 02:26:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:15 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xffffff96) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 407.559391] binder: 13320:13326 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 407.607339] binder: 13320:13334 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 407.655390] binder: 13320:13326 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = accept4(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x400}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x10000, 0x1, 0x10000, 0x2f, 0x7fff, 0xaf, 0x81, r4}, &(0x7f0000000240)=0x20) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @raw_data=[0x200, 0x7ff, 0x0, 0x8, 0x7ff, 0xffffffffffff9235, 0x7ff, 0x3, 0x4, 0x0, 0xe4, 0x6, 0x8, 0x1, 0x6, 0x2, 0xe9, 0x1000, 0xffffffffffff0000, 0x3a4, 0x7, 0x8, 0x9, 0x2, 0x1, 0x401, 0x0, 0x3, 0x6, 0x1000, 0xccd, 0x5]}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000400)={r4, 0xffffffff, 0x4, 0x4, 0x10001, 0x8e}, 0x14) ioctl(r5, 0x8, &(0x7f0000000280)="9f9062f1d012f40d9b0ad6ada743916028b6889664654f562ad38a654ecf4ba4a4aa76a249eb6ee1db9b6421946d0060f021f85c04c47f835f51fc2c4834735ed6dab408215078c27ba268b1c8da12") ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000300)={'veth1_to_team\x00', 0x3}) 02:26:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7ffffffb, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000200)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:16 executing program 2: mknod$loop(&(0x7f00000005c0)='./file0\x00', 0x3, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 02:26:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000140)={0xfffffffffffffe00, 0x1, {0x3, 0x3, 0x10000, 0x1, 0xffffffffffffffc1}}) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000000c0)={0x0, 0x4, 0xde55, {0x0, 0x1c9c380}, 0x29}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = add_key(&(0x7f0000001780)='id_legacy\x00', &(0x7f00000017c0)={'syz', 0x0}, &(0x7f0000001800)="19c5be9b35fef8411f786dbed81d3a366de0de2993a0f1109a3d35dd7d300e3c762a040e52b71e00e11e02e5a848c1d122329718db5ac979e70411c3b773b6f30ec5f7bc6bc819dd01a9ce23b4d73fca8ef3e80139a39c83a378ec3a01075698aa9fe1c5ef90d73398606fb0f27208e7c67fc1f2a75e82cd8a1e8624fbc8b556bdd64883a3ed6787d07f16d590077dc2a1d7832cd045ee65d421a81c82082cb1e23a95c10fcb5651c1be590683b18cac1c71a7b74234b2a0e4adef52be74c1c11fed44bb9031dd", 0xc7, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f0000001900)='pids.events\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000001700)={0x53, 0xffffffffffffffff, 0xcb, 0x629a, @scatter={0x5, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/219, 0xdb}, {&(0x7f0000001300)=""/173, 0xad}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/81, 0x51}]}, &(0x7f0000001580)="0879c76f8ef8709680b30975ddbbd60600ed0bc3bff3d3b335bbab27d7faaa02768e2b1065ec40686051983f73b41b50e395f1fafb9e5ade2ea7ec155d045df66ed6338b0c12b3d137fc30597151e203e2fa36d9c0f7d8e01941c73e1bfdea6e449ac3217009c65e8069e0bbe1c468d7ce44ca992101597a3466f03d9bc2061cb9aea2da18e12cf49ff327b3fb4321bcb268f2e005202212b84bd63e4b47e3fd8c9c38ebdd20a14f075e68324bd3a236c4e1e61f3a3bc3f962dfad6f88a4c50325829b678a9b058d281d3f", &(0x7f0000001680)=""/11, 0x8, 0x10000, 0x1, &(0x7f00000016c0)}) 02:26:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x12, 0x80, 0xc2, 0x0, 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:26:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) pipe2(&(0x7f00000000c0), 0x80000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x4) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 02:26:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) close(r0) 02:26:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000400)=""/78, 0x4e}], 0x1) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03Z\x00\x02\xe6\x03\xca\x00', @ifru_mtu=0x1}) r3 = dup2(r1, r2) syz_open_pts(r3, 0x0) 02:26:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2002, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x8, 0x6, 0x8001, 0x80000001}, 'syz0\x00', 0x12}) close(r1) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000140)=0x2, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 411.355680] binder: 13387:13389 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffd, 0x80000000000002e}) [ 411.505665] binder: 13387:13389 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 411.543752] binder: 13387:13389 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 411.551072] binder: 13389 RLIMIT_NICE not set 02:26:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x70000, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000180)=0x4) 02:26:19 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:26:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={r3, r4+10000000}, &(0x7f0000000100)) 02:26:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) io_setup(0x80000000, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffa, r1, &(0x7f0000000200)="b264c83b7b98939b59ed775244f5b3c877e5901b356178f905b4ee6f67709dfd36c8da9a32f7ae53865ac73521fcb226d91a43fd3fa9d53b2dda3cebd0f96a81017861fcb6b1d3bd5a4c69321716f3b59438c4950cccbd4025c7a2a3c13c01b98b4da4f452c1f90a72ce9ecf1b33ed819532cbe64cc52471ecbf0033e87b1e2fed4c3c2bec1330b0278d9b175bc7ca1e0729f972a48f4939e49d23e221022d4c5c68a7b25fefd0f3a9798a492c6aa6b5fb25ab11016991542cbe2d78277741f90ac142873178a1945684170c37be4b1f2256887c26c4c4afccfd26ee2aef326b2d6b5f121db7f8cc8b19ebd1fb7b", 0xee, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x800, r1, &(0x7f0000000300)="e38af28f6d3de8242044a7640f3984abf42aac2fc125c205ed0f9429881897f9e7d3f1550fb85fcf58fa71b20e5277cc6d5fd9f8d870691ae8e03bbaaa71ef182e840a0e84d0a94b906c49fdef546f40fdc4566c191e494d3ed7a55afc5d9473be281254b4af0aa151cc66e7fa207cd7fded24f317fca2d85209146aefb28bf9bd3f170878829bf18e24c057bc581f16fbae4334ddd0f6cfe9648f33b35b9f8aa55b7d", 0xa3, 0x5, 0x0, 0x0, r1}]) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x40, 0x200000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) 02:26:20 executing program 4: mknod$loop(&(0x7f00000005c0)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) accept$inet(0xffffffffffffff9c, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) 02:26:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x149200) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@deltaction={0x18c, 0x31, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x1d, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x8, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x9c, 0x1, [{0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0xb948}}, {0x10, 0x17, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x18, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1d, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x18, 0x18, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x14, 0x17, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x14, 0x16, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffff801}}, {0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0xaf1}}, {0x18, 0x12, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)=0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2bff) creat(&(0x7f0000000000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) 02:26:23 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @mcast1}, 0x1c) 02:26:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000580)='ns/pid\x00') unshare(0x24020400) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200084}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x23c, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @loopback, 0x19}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1315e10d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xaab5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9e9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0x7e36049174d3786) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r5, 0xa15, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77758376}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x80) [ 415.171880] binder: 13438:13445 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 415.202731] binder: 13438:13445 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:26:23 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) [ 415.224976] binder: 13438:13445 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 415.232591] binder: 13445 RLIMIT_NICE not set 02:26:23 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) 02:26:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0x3, 0x3, 0x909, 0x3, 0x80000000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x9e, 0x80}, {0x10001, 0x400}]}, 0x14, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) rt_sigaction(0x12, &(0x7f00000002c0)={&(0x7f0000000200)="36440f5f3ec4c1f8299d2857f5bc66420f5edec4216557d7c401ef592af3d9e0c4e17a16f73e670f296428c62e364008f108bf3f000000", {0x3ff}, 0x1, &(0x7f0000000240)="c423610c34970c470f6126c46341793c250000002003c4c3f960c2d8c442919ea00e000000d8e0c4020db737c4a279351b2ef367f045871500000080c4e355796f02b7"}, &(0x7f00000003c0)={&(0x7f0000000300)="c4027d179900000100381f400f409d08000000d9f8c422219efd26660fc5cdf4672e660f3814ef6740d31bc4211de9670b7dbc", {}, 0x0, &(0x7f0000000340)="26f20fd6fec4417d10678f0fef9bd85e000047d3c9c4823d368e09000000c4c17a2c8c15db000000c4e121e952006766460f71d1f5c4e2c8f51765360f8c93ac0000"}, 0x8, &(0x7f0000000400)) [ 415.419019] misc userio: The device must be registered before sending interrupts 02:26:23 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x105000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020403) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x8001) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x333) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000340)=0x2) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000000c0)={0x4000, 0x3000, 0x9, 0x1550, 0xfffffffeffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000140)={0x1000, 0x7, 0x1}) 02:26:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae61, &(0x7f0000000040)=ANY=[]) 02:26:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000000c0)=0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:24 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) dup3(r1, r2, 0x0) 02:26:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:24 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r3, r4+30000000}, &(0x7f0000000240)) close(r1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x101001, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000002c0)=0x7, 0x4) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000000000000000000000000000000000004000000003c159e8ab144d9a30b000000000000000000007e12115f9a2e8a177fd88203959da900000000000000000018ff07000000000000000000000000006edf84da00000000000000000000000000000000000000000000ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000"]) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$rxrpc(r5, &(0x7f0000000300)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000140)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) 02:26:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x40, &(0x7f0000000180), 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:26:24 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:24 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) ioctl(0xffffffffffffffff, 0x2000c0984124, &(0x7f0000000080)) 02:26:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 417.127963] binder: 13540:13542 Acquire 1 refcount change on invalid ref 0 ret -22 02:26:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) [ 417.186314] binder: 13540:13542 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 417.218322] binder: 13540:13542 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:26:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0xc79f) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 417.297809] binder: 13540:13544 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:25 executing program 4: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() dup(0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) ptrace(0x11, r0) 02:26:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() wait4(r4, &(0x7f0000000080), 0x2000000a, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x101001) writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)='L', 0x1}], 0x1) [ 417.737159] binder: 13572:13574 Acquire 1 refcount change on invalid ref 0 ret -22 [ 417.774891] binder: 13572:13574 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 417.838101] binder: 13572:13574 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 417.892510] binder: 13572:13583 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 417.899672] binder: 13583 RLIMIT_NICE not set 02:26:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000000c0)={0x20, 0x4, &(0x7f0000000080)="9e48214030f56214c972c8b55b97f66af4f0087bb3336592c9f57469c7bdaff921445f39ebfe6cc47dd4b0cc1e723ac4ea6705e7a71cb6a31c520f0cbefb2b", {0x49ef, 0x1, 0x7a777f5f, 0x1, 0x5, 0x2, 0xd, 0xb57c}}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:26 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x5) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x101000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x8001, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000200)={0x5, 0x24, 0xf, 0x11, 0xb, 0xde, 0x5, 0x3c, 0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000100)={{0x61e, 0xfffffffffffffd3e}}, 0x10) 02:26:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) read(r0, &(0x7f0000000000)=""/184, 0xb8) 02:26:26 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10002, 0x0) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000100)={'veth0_to_bond\x00', @ifru_names='team_slave_1\x00'}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x5000) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x6, 0x0, 0x6, 0x4, 0x1}) 02:26:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:26 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) set_tid_address(&(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000000180)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 418.820684] binder: 13630:13632 Acquire 1 refcount change on invalid ref 0 ret -22 02:26:26 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) [ 418.887031] binder: 13630:13632 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x24020400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r3 = getpgrp(0x0) r4 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) linkat(r2, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x400) migrate_pages(r3, 0x9, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x100000001) fsync(r2) [ 418.962888] binder: 13630:13632 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 419.006159] binder: 13630:13632 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 419.013658] binder: 13632 RLIMIT_NICE not set 02:26:27 executing program 4: write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x202000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0xfffffffffffffe7a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'caif0\x00', 0x4801}) getpriority(0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r1) unshare(0x40000400) 02:26:27 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000000c0)={0x0, 0x3, 0x5, 0x3, 0x1}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x100, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 419.363827] IPVS: ftp: loaded support on port[0] = 21 02:26:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:27 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x210000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) exit(0x800) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:27 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r5 = accept4(r3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) 02:26:28 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 420.058662] IPVS: ftp: loaded support on port[0] = 21 02:26:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xa7, 0x0) 02:26:28 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x80000) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000100)={0x0, 0x376d, {0x51, 0x3, 0x7, {0xe6c, 0xdb3a}, {0x2, 0x6}, @period={0x5b, 0x4, 0x4, 0x200, 0x7fffffff, {0x6, 0x800, 0x8, 0x3f}, 0x3, &(0x7f00000000c0)=[0x2, 0x2458, 0xa00000000000000]}}, {0x408ea8fa965b1c03, 0x1, 0x1, {0x7ff, 0x1000}, {0x5, 0x3}, @const={0x0, {0x2, 0x200, 0x2, 0x446f5502}}}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:28 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [{}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0) 02:26:28 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:28 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) getgroups(0x1, &(0x7f0000002b40)=[0xee00]) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)) syz_open_pts(r2, 0x0) ptrace$getenv(0x4201, r0, 0x80000003, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 02:26:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getegid() ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 421.056522] binder: 13731 RLIMIT_NICE not set [ 421.061118] binder: 13730:13731 ioctl c0306201 200003c0 returned -14 [ 421.087974] binder: undelivered death notification, 0000000000000000 02:26:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffd, 0x80000000000002e, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000080)={0x9, 0x1190000, 0x2, 0x0, [], [], [], 0x8d, 0x1, 0x40, 0x10001, "6cf8da90e5a1584221e2a4408896ecb8"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:29 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:29 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:29 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 422.185538] binder: 13759 RLIMIT_NICE not set [ 422.190258] binder: 13749:13759 ioctl c0306201 200003c0 returned -14 [ 425.460815] binder: undelivered death notification, 0000000000000000 02:26:33 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 426.117701] binder: 13774 RLIMIT_NICE not set [ 426.122478] binder: 13771:13774 ioctl c0306201 200003c0 returned -14 [ 426.155272] binder: undelivered death notification, 0000000000000000 02:26:34 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:34 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 426.437204] binder: 13778 RLIMIT_NICE not set [ 426.441970] binder: 13777:13778 ioctl c0306201 200003c0 returned -14 [ 426.475199] binder: undelivered death notification, 0000000000000000 02:26:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x0, 0x0}) 02:26:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2276, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, @buffer={0xfffffff, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:26:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/190, &(0x7f0000000140)=0xbe) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r5 = socket(0x1, 0x4, 0x7) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="080000c5eeab5db4e7000000030001000900f525"], &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0x0, 0xfffffffffffff8e6, 0x0, 0x7, 0x8001, 0x97, 0x6, 0x41, 0xfff, 0x2, 0x3f}, 0xb) 02:26:35 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:35 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:35 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:35 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="39000000000000000000006b92068a402905470484d1000000000d6bd6a8f2972d26733e4b4238252b92314c0000615dace1ad9831e39dd708"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 427.066372] binder: 13789 RLIMIT_NICE not set [ 427.070980] binder: 13788:13789 ioctl c0306201 200003c0 returned -14 [ 427.115612] binder: undelivered death notification, 0000000000000000 02:26:35 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x122}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000)}, 0x0) 02:26:35 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:35 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0) 02:26:35 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:35 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfff, 0x200000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000002a000/0x3000)=nil, 0x3000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:35 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 427.657099] binder: 13822 RLIMIT_NICE not set [ 427.661894] binder: 13820:13822 ioctl c0306201 200003c0 returned -14 02:26:35 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80000000000000a}, 0x1c) [ 427.755354] binder: undelivered death notification, 0000000000000000 02:26:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) fcntl$setlease(r1, 0x400, 0x3) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1ff, 0x8000) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000200)=""/4096) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x50800, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) getsockname$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) 02:26:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:36 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r0, r0) ioctl$TCGETA(r2, 0x5405, &(0x7f00000003c0)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240), 0x4) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000000001}, 0xc) fcntl$setflags(r1, 0x2, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000180)=0x80) inotify_init() getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @multicast2}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) r4 = getpgid(0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x1, 0x0) ioctl$VT_RELDISP(r5, 0x5605) prlimit64(r4, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @mcast1}, 0x1c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x420000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000004e00)={0xfffffffffffffffa, {{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x12}, 0xbeb}}}, 0x104) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) stat(0x0, 0x0) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000000c0), 0x4) 02:26:36 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:36 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x1ffffd, 0x80000000000002e, 0x0, r0}) dup2(r1, r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 428.276687] binder: 13846 RLIMIT_NICE not set [ 428.281273] binder: 13845:13846 ioctl c0306201 200003c0 returned -14 [ 428.359272] binder: undelivered death notification, 0000000000000000 02:26:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:36 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="6a48373dea8c0000000020000000", 0x0, 0xf000}, 0x28) 02:26:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc94255b102d1549daa64972d96825e3563d093c69cebc5e9c"], 0x65) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 428.735613] binder: 13864 RLIMIT_NICE not set [ 428.740299] binder: 13863:13864 ioctl c0306201 200003c0 returned -14 [ 428.802700] binder: undelivered death notification, 0000000000000000 02:26:36 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) 02:26:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:37 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 429.175451] binder: 13881 RLIMIT_NICE not set [ 429.180173] binder: 13879:13881 ioctl c0306201 200003c0 returned -14 [ 429.204383] binder: undelivered death notification, 0000000000000000 02:26:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xfff0004, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:26:37 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 429.558948] binder: 13899 RLIMIT_NICE not set [ 429.563821] binder: 13895:13899 ioctl c0306201 200003c0 returned -14 [ 429.621935] binder: undelivered death notification, 0000000000000000 02:26:37 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 02:26:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080), 0x10) 02:26:38 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r0, 0x2000c0984124, &(0x7f0000000080)) 02:26:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SMI(r2, 0xaeb7) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:38 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x0, 0x20, [0x39, 0x64, 0x77, 0x37, 0x7f, 0x0, 0x73, 0x0]}, 0x38, 0xfffffffffffffffe) [ 430.317334] binder: 13931 RLIMIT_NICE not set [ 430.322066] binder: 13930:13931 ioctl c0306201 200003c0 returned -14 02:26:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b7020000fe000000bfa300000000000007030000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0ab0fe000000008500000026000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="16131a4abd08285a2501e4f83499", 0x0, 0x7ff}, 0x28) [ 430.397905] binder: undelivered death notification, 0000000000000000 02:26:38 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2000c0984124, &(0x7f0000000080)) 02:26:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:38 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) 02:26:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x4, 0x4, 0x1, 0x7, 0xf23, 0x7, 0x80000000, 0x7, 0x1, 0x6, 0x0, 0x8, 0x4, 0x7]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r3, 0xa694, 0x10}, &(0x7f0000000180)=0xc) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xa914, @dev={0xfe, 0x80, [], 0x1e}, 0x7ff}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x1, @loopback, 0x1}], 0x48) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 430.849435] binder: 13954 RLIMIT_NICE not set [ 430.854298] binder: 13953:13954 ioctl c0306201 200003c0 returned -14 02:26:38 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) getgroups(0x0, &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}], 0x1, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x4) syz_open_pts(r3, 0x0) ptrace$getenv(0x4201, r0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 02:26:38 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) [ 430.904573] binder: undelivered death notification, 0000000000000000 02:26:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) dup2(r1, r0) 02:26:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept4(r3, &(0x7f0000000080)=@ax25={{0x3, @bcast}, [@default, @rose, @netrom, @netrom, @remote, @default, @default, @default]}, &(0x7f0000000100)=0x80, 0x800) r6 = accept4$tipc(r5, 0x0, &(0x7f0000000140), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000001600)={0x3, 0x1, &(0x7f00000004c0)=""/58, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=""/193, 0x4000}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f00000001c0), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x808, 0x6322, {r7, r8/1000+30000}, {r10, r11/1000+30000}, {0x2, 0x6, 0x80000001, 0x100}, 0x1, @can={{0x4, 0x5, 0x0, 0x10000}, 0x6, 0x0, 0x0, 0x0, "2a3bdc14d626f9dd"}}, 0x48}, 0x1, 0x0, 0x0, 0x2004c044}, 0x20000040) sendmsg$nl_generic(r5, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="141400f31299dbd769dbdf25130000000800caaa311af5ea479b57c08090000100b9eb1d9832a7419849f2e68fc2b4318adcc45f1a06a993090b65e29d33987511245c95", @ANYRES32=r6, @ANYBLOB="080010000400480041a680f954b2a572a22b243073d63cb8bf4dfc365e25f1a7991387848a114dc4ba23df19ccd1466a10e0c7488fbdcf72eac9058a10a79723d954a6ce365ddb29148e62fab8782bc3172c6c86740e15a04219e7720fc69e082d1be925f1bbd7827425c636c942c02caf18794cc6ea55b4364a39eb1593f4cb3abc5bcab38a62d2f4e9b871618815d5b87b7bd63a5687e776b1584029087d716d42f6e08e83d00cc6298f79eff4bb4f6183e8d75933f757da6e34711b0c840c01d9ab88efa244ffea24e86e017a7ceeff8d4525cfb727e147bf5300098c8af6daf685c71172928076a41fd38c83747473d4a890d4d5d098d9e6f4108c002f86606993868cedae660f59cc548aa52b3de72bca01ef8acacc66c7fc71907751e82bb76a2641f123910ae83daf0e0dd26f1e4a59cd805a15d4581b0247562291059ad1a143044b4ab91ab57d9f9fb75c0e01cb610f5320f7a3b4bc88591d8c4b5cf52998587a591d015be36dfc3561869aa69d94beeb68832b7f4e32c0c07985f85ef461ebeea45f9232c0d7db92a98dbbafa5b224f31ac954356381b9b66910a3e52c46a4c96cf231d2a12a87c424373a5bdbf6ac30b4000b117ab303f967cab7977e109c7049c735d69994cb2434684f603d25cd782398c0beb79ec8399bb0146c700ed070d643ffbb52e1d47dafe351dc911391e805c87015bc4f9e1f376cbdec4cd64843ecc9a5a9a4e6a59300bbe8aad64ccc0f0f1e8595af7556ecd1dd06c2a0937c136825a9ccdcdc690012bebdad71942f672147c126ac4773072e0a415ba43527fe6e4abbcf607ef41dd8f860ca102e528e961158fc3869b74e50a84b5a6406c66a45dfe0b8ccf3c8041c4326cfb6a04bc49b6f6af28746af4a54c97dad8abdaeed3c60167a4f7d48f7e328faecfc963c836b8766a612ef84b7cf3e08adeedcffe80b4736dba9729659f882f815f5f3e4acf788dc56c35d02093849fd71251eb7d9dfcd7957d76408b730b203a2ad120467aa0623ff8a23f79e191d21c1c1c53aa3319f1397f90d25b0b04c095496788b42de1839e04ad5b2e044d872cacc85cfe04a88b1476ff047f5faa5a12e07595a5444c5752d99472aa47e24a357ab50c8bb0f9d63ab64679d3833913006cc2c1d73ee5eaa71de4f6fea76b7dd913af409a3dbf5ef51fb82170be115e6562fdcd1384f9e862c648f0555866c7eecb7bf9562e86365e3a163a79e7a1aa93ae52ed32c314151712f1edcf3bb876967c1da3155add81e79ff59b6cd95ae96fd08a09107093fa76c9de083e3c9856bfe37464f5738e826065d6efe8582314d5bcde67fb4a493a05368f5ce8b8391da736f12f43f8f658511b84af7a8a7cc07e9d9a9493627128d39d05d5d67ac929ef2470da4372882e1b6a818dea743cc548595e6b9546c86d47618b2c48ec15332359a3a42f8350febda0ad199d6187f344dc179b683e0559a2bfb72eaaebfb23d1f3ea3c9a41c799c0ec1646c5e0dcd84e07c79c9ec53cf5b1a492da038e947fda1159d9df4b6ed1afc53b2cd1ecdc7946ea4cbdd0e6c4b0baca09aa24f789e01332c7820bd01f4482b130a2305106f16553984cea4806ef81458f850787c80dd4acd61413b51db0e2e4e991eefb27935dbfcf041539c6effcbc17360e5d7d6093a33309fff51c50e08eb92fd5bdb294f7c2d8ad5e56891e55e7014bd4e2ecd8bb1629350c493854b6c4730f9ebcfa9609114bad78faffa570c5867944b72257a92a6889786973d8cdcb719554090a67e9a88849110be8f28f3a62ccfaee54c79436294cec49ba2627ee9af0cbc11b96927297ee63a811166ae370ddbd22016f0596c785295505aac7290042a1b61c354eb32430b74aa3f782632b803857c2f8f46a6b61cfb8b666754286ede5085f29c9319a1df7b0df0cd64d2069311f73f9260f473ac27961d937a9de88f9cf519cd088c87cc64827622e1723daea129b4c6c2a5023fde41e3195d7bf6308309ad87a976ebd4309afc4ded7ebd8395a6900a6fcf05941c498cbffb4dd87f42fbbd2d39170468ee9ed8f27398f0e784c85916073bc2ecbd49cd7586c217b33768d70870e035c08206e5f67b8a2324b5723811216b460f8468cd7457660f342afa08238332388fa0c53fa929bd3afc1ec6fca5b6e0d8dbcaf9e4968662a4b251df32a74729e14873573bf6ca74b83b8f4eec2dd93a1dbe769f07231ef82fb5839f2800c903b6af79a7dd937dcfed6cd7adffb69cf9d77b34f68cf6213f115f4752d1b4242c5f0b898160dd7f07ecfd9fa4b82836ce5c9a158bf8cad8366bddac902b8d54d9aaf78c7c31498eed87974f4e32390cac552be8de1f85e346de9cbc6fae95423c6fee93ae9dfe638a1c2f1acb074e9d4714df8a1db4f8a1a04bdb505d3affaf3aac14006854396095ef28f7e0fcf05ab137c16ae3e704057dbbf6f8f3deae4f8c0a666d2b41e2ce7e12902fb84521d5d22271125e14134514a912d62ea7140e12ad99acf3679935cbc7f50b01044356b3d238e166d34795bcbb96d7471678d241b6bd435cde43069b1ff2e01f6be40ada79a6dcf8a2a83dfb6da30a39ae7d419311ad6e71f7147c858d7b28a81abaa7519a3c46b634ba4b96242efc7e2c993f208ae739c31e809c4e0ebf4593cb1416b9fb23a72be4dfc62f13a80e590edf51b5b5971c27f1a702e5113efdc28185f9cd2c4047e629a3d99317a2f813a31e6c4fb7c9d6285646b79c4a6419ebfef53bf9586a7af915f126d1686db40c679b683e268fed7aeb19cba7335cd38fef9bf323e6d4ab1efccfd649248c1d11ae057de27e9c44e105c876432c5d20acb9a15452cbe8a850459f5dc4af9699dc40ef98c1a6520c0eab029102973eb9673916e314a6cae338b262e60e4a09f0c92f3d5b5b1cc0d7ba5847df86a33f5f315e1db4942d730710d164061e4e565bb827dbc5409bfcacc1ef1d33611f2215434bd0e987a395153ce54f7b8cbab87530cb9eeddfe13b0186605e77869242f4f823e27a17fb55e11e59a5e240005f9f783b123ef8016e7be321ae537f6aa3f6fa86e71a6f742b37244a10a0329b94de25c34a89af7da5e7257aa672c6ffef50f8c93f1743caebbf621e7885c9fb91b6ea9f23219b05e1ecdad795f812cf08126c349e69c5d93b1ae545c34f3784dfedfe1d44759d1a7351dc678abc5ee074db504bbab1d20e667a6466e90f55dfe8ccce41fcddc4405e97454ea82a7af3c961a12add36aca13170c0074ca2dddee79bf466e8519028a732377213f7d63642eaecba89ef931d86a4bebe5dc49b7c9b323edfaeaabffb9a9f48f3a0e319ae7d0fa1d9fdade8b1ad5ac1d53432dc74f651bd5759e396204f897dd51b1a4281c6ba79742252bf18c3a1d5cdf61a321d698a0b71f52330d53eb2bf6260400132e17f0a5c46edb79ede671d8b5fa9c12274dda577c77b2b1ce29d2e38c7962dadc33cf8e06a9c23ecc45c1cdfc53d97f4fb6d7c91085fa22b04afdee2bac69388402581ffb6dc1cbfac0dd0ba9ec40cbbdd61214c86541e5cf6620c8c48a9607581a26e841611a1dd625a7a7f401ed401d8887e6eb70a689ce48ed1aa1e8559baf8d3cbc37df5352fba58ac37757a93e8a8d6c93c931c5d3c8eac5bdad2f4d539b1778b8f5a0c3864d3c52e06485c1c63535498f1376b6d2f6168aa8735a1f1f89c47ebdf340076a7a4ebe4e8506493af485a4f9071be543abdbb06c36737c91a2e5e8ad43a6e896103883be0bc29644b718fe9b7cf7d6e80ef7df91dac7cbe717c9ae929258a51a4dc4f8324687e8e588e99a6e6228688b34ba0573bbfc0c9e337b72876614e1ec1321e837eb35350e622f40896cd4a7e5eed4abd7b574ccfdae9f4905f0c205af80c230884c5fbc7f328b861943daede8b3a902f7f0e1d2eafb2d8e80866f5c84a931aad1c2c7a44f553a766b90dc68e47c587d521f2071dc351d051be85fbd5545c47ad4930e780eb71e373eee518fa171b952f412f87499bfa150b68a658f5995673f21f290978b527b094cf05f826abb5af2db9c2a63d913fa39f52a30a7ad4a9c6ce93968b80d9c56b89e7bcf841d53ee93a8d12cb585d11e9842cc71e6085ab7ec352654415b1b622c47225cb9631943bfa4fd89360a7365e4a73a7629af525ad3c57e147f859a4ba7a97d3e486ec4325422308812c0c672f73a4940a37360e0d768b6d9b35c035f50e8259f86f6d4aaff49e98f6d416a09c682ae98d6342ffc317b4968a693964f46586823df599aacc8569c4c62ea8733315a781f44dbcf2571b8e29cf3fa28c5850af849212abe8c25275b35a2807324c87d15631b252a4e2669b5f89fb1930ce625a1d2826d9043b29670fc470c110f3e22aca02d7a725ec50ce063b4227fd1c6291bcc5b4ecfc63003ac88a7efa589535abe0a7d68806302f6dd797a81519bd12575d0ca65e637a71ed18ef4579ad902e06ddf227fc2deb20af07a5b40134db261849255aee32075895463b7ec62941b21f7f5d2f69f7c34243acf5f6b3fbce4f82df1592fc5dcf3572f8d34095a18f99af98498c2ad8280d93889b317466b7bfe563e945f5f214d1ddc337b6631ebfc949f0e35973f5868fb0c8fd4245a6895438a8570d52c0f9e0c43054fce5d44e1e8a11d3e1d1e82ef1eee7521fbc421a19382d09a8995d4993db4ff3b3775ab5ceb1fea25444c96b4006c803414bfc3ae3551bd48fa09c625dbde72f63e50dc12d6f7a782033fd0cbfee63d6b8997a72871fd9a88d1137546b5eeb34ebf4ffe525c98784104706aa802db50d7fd2a1be4e43726eee9c0fdb522175f55af9e66b7b9852326103a510c3a1d599dbb75d217f141ed80943915d2c50375141af173f43cd703fbfb1622426829ebff1a576be10b717a509e519247c05eae98636579a21f38c59e93bc32c62cbfd79ac05002a7755a7d91ecb1312b5205fe1f9435eebe48703c36ff074b5673722d8e96c85e332ee148715edaff0d6684428a478a3f1fdfc9b434d3300fc51c20c29ada09f4fe6f16f97c024f62b52f970145f86ebb5beae426540b7a6d3d5007684b3e86c693828a96e0f9ef4be09d8fc9d1ae1e86465cce27f168f64b316f3475069c8da7248afac7011ca00827583b5917f2bcc901908142665806953e2952e2bd7784d5095a95c992ff809591f3388dd15b11f298fa57424c0937e7677b2aa710e8bc749c699c0790b653ecf78d366455becaa3f4b4916f6802f2fe22b328c7a793fcb79d1ff92242bbb14625eef0c1db9493bac6af05eed2e10164892549c92ffa0f36af27eff33b74cb6341a7abb43f359962f315548cfd54cb634c2bdc513e22d1e84032dad5eb1a1f8cd4aad72a09f12ad3802b14c44f00cb0f133825d3bdc9f47f373dc112d40aa02356e4a954cbe4f2f39fe7e3afcc2984d04bfda94a189c53eab9a2197885a32cb77b099382de8d1a836b2290c03e10524846ed2d53ee3c06b3c9d0e24f0d1d6894578474844353d16f8fd59838d41faf8f1715dd6d44dc145e5c84612bdbfc2cafc2e3188e2a2322d1b01944bb0def9634a5fe837c92911ec037eab7904c55df5dc345ee10e561b4cf4b84111e0ad0971fdbedbaa1eded65e315e24f2a407b7839b411767776e7925f0435983a26c3165959014fc8bf05a088aefdc5f4d8a3eec6969074af68be60b6f0244b060365d5d7ad5ef1496fa507b15434f2d521367aae385f90f07c2f96d6151736c6c0f13c51f4fe96d644616d0bdef1957562a0a302df71d6ce371343a68e7ff35fb6903d765016cc44252be7aa78ea65859c7d6ab03241ebb8ee5e7b022329ee50679cfe732afd27121996db4da25c6b021f091f6fbecb2fa7ab787b2683839527123d2d3db078470f6e4d48dfdea6cf144b238264aeae172355b387604930bac52746695a0fda5b63bca0f9b6544ab025b4ed2b76d225c8651aa117651d0612b909429110cd07cae4ad6318d95a464b123abad8be781736c2949aa66773a734b5825700b65306f423ff0bcc9ba999ff2b39a758a85c918f2113d1084982f630120e008b4631b14785882532fd209c2bdbcc5742cd54d3c356f83a490c65e5a45ad81434ad616117388478d733e60e49797272476240e5c0726ad81c23bae4e0785674152c28293af6b84649e2ce7e633ed471f38f1dfbdafb79ce8edabfcd7762ea67e0a6dc1e9319ebb036cb44fe0fc96a7719c32e02173113447a5b78b720ba02da183297d49edd619fe7b25454966921c260742259dd12e45130d8c7b2569b3dcff3ce5257f83fbfa99e311262a9407853fde463936d39e0d72454d8f51aee4617356263ff89b6912164d1360f451fc671e18c0e388ed2a8bee28f2f21ea49efd455748baea8f902fbe4d300b1bef6d3a97b851e5711dd8ca4fe44fd1adfec0ea6e00e11b2329130244a968c77dd6e5e9c1fd23cf73cf48e8131ba36ac53772ebb0f75a1308000c0002000000e2016c7eb697e48703c98db906380be8f781b60cb1170d9b91c453abbccacc8a3b5190d4a0719846694ba49a0ee0f354a90717fd31fb2a29899550629067d0f1f4982864be27bc4c0baa6d90ec1b4d85b927040495d1e2c835ab5ece7a47ea2d5e0a546662257b45d096f38b09aee9df23edbfbb9c33d47e308987036003e10d68e3abbc16af0b310d0800440000008463780143004db26575ce3bf9760ec30ea4b815ea14f8e06ca42a44ef89dfb78da4f26194243b6aa0a471b18f6be04df41cf50c831c7651409ea3646ce247f4518b2c997be3636f39fcf08ee2b6656f47f9000164ed4cc43e4f17511ff45f1d21a4beab58106236aa23be71690ffb30bd799eca2717568a9822795413831e2b1d2508054f3b15182d7c9a79e4007e00622e550cde777ae74a1563d74d97dd5c8b40d7aacddf2678a1db5938810b67c5a2bf54743021919f492274333be93fb2e4d9683077fd21510df755b1c3a8814e4858698cf0cee46bc65da17c0bda6ab774a90224af94f5c44a357fc96c4f600bf7aba2d87f739e52af8cbc8bb4b279d8dd1fe0a140f881ec8cc7108c506ce9c4d0b344819bd67d1f14dff254b8c6a26639619349a46729140962b3883dd673ba4fcf7125e450f7c9a1b3ec018f3b5a126e2435a111fa8babdbe25e63a17aaddbd8b56ca11a5f1836ce2553cfe72a8d53153fb75cf3b64f654ca7d70c344f000008001c00c8000000000000"], 0x1414}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r12 = syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0xd889, 0x28001) write$USERIO_CMD_REGISTER(r12, &(0x7f0000000440)={0x0, 0xff}, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000002b80)={0x4, &(0x7f0000002b40), 0xa, r12, 0x1}) [ 431.286864] binder: 13973 RLIMIT_NICE not set [ 431.291782] binder: 13972:13973 ioctl c0306201 200003c0 returned -14 [ 431.429834] binder: undelivered death notification, 0000000000000000 02:26:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:39 executing program 2: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff0001}]}]}, 0x20}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, 0x0) 02:26:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:40 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 02:26:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00o1\xf8\xee\xc5\r\x8b_qs\xa5F\xca+\x02\x044\xa0\xdf\x9ch \xd76\x0fb\x9bq\xb11J+\xf2\x14\xcb<\x83\xf2\x8dG\x8bs\x9d\xda\xf3[|c\xb2x\xf8\x89A\xd1ki\xa9\x9d\x01\x0e\xdf\xd1R&r\xbcwc\xafqD\xbf\xe4\x966\xdf$\xef\xec\x95\xf7M\xc2\xfd\xfe}\x95\xda\xdfn\xf2\x0el}\xae\xd6>\xe4;\xea\xebfW\xf9\xbc\t\x95\xc5\rD\x14\\9p>)[\xca\x95\x1f\xc5\x9b)?\xa4\xf5\x8abz`7\x1d\xa45T\xdd\x96ym3\x80\x8f\x84\xa1\xdc\xde\x9eS\x8c\xe2\x89]\x00\x00jM\x94\xb37Zinn\xf6l\x82\xd1)\xeb\x06F`\xdf\xfd\xe5w\xa6_\x9f\xfcc\xfa\xc0\x92\x88\xd8\xae\xa6\xab\xa9\xdcC+E]\xe6G]rT\x0f\x9e\xb8\x1d\xe5D\xe6\xacd\ff\x11\xe9\x86\xc6s\xd8\xbeb\xa0\xeaf\xed#hZ+\x84o-1\x88(\x8d\x1f\xe8\xfdS\x06\xc5\xe4\n\xf0tv\x0f|\x0e\'\x05\xb0\xfd\x9eS\x97\xee\xd4\x8c\xeb\xc4;l4i\xbb\xfa\xf3\b\x13\a4\xc3\x87\x8f\xad\x04M6%d\x87\x028]O\x84\x9at\x9e\xbb\xa3\x19\f\f\xec\x8e@\x8c\xe10xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) 02:26:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:49 executing program 1: 02:26:49 executing program 4: 02:26:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:49 executing program 2: [ 441.713386] binder: 14017 RLIMIT_NICE not set [ 441.718002] binder: 14015:14017 ioctl c0306201 200003c0 returned -14 02:26:49 executing program 2: [ 441.764889] binder: undelivered death notification, 0000000000000000 02:26:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/139, 0x8b}], 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xee, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:26:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xfc) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:26:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x2000) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) 02:26:50 executing program 4: 02:26:50 executing program 2: [ 442.228714] binder: 14039 RLIMIT_NICE not set [ 442.233525] binder: 14038:14039 ioctl c0306201 200003c0 returned -14 [ 442.341985] binder: undelivered death notification, 0000000000000000 02:26:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)=""/97, 0x61) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x7fffffff}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r4}, 0x8) close(r1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r5, &(0x7f0000000300)={0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000500)={r4, 0xb2d4}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200001, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x1d1b}, &(0x7f0000000240)=0x8) bind$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e24, 0x1, @remote, 0x9}, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000002c0)=0x8) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:50 executing program 2: 02:26:50 executing program 4: [ 442.640591] binder: 14057 RLIMIT_NICE not set [ 442.645671] binder: 14056:14057 ioctl c0306201 200003c0 returned -14 02:26:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 442.767537] binder: undelivered death notification, 0000000000000000 02:26:51 executing program 1: 02:26:51 executing program 2: 02:26:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:51 executing program 4: 02:26:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000280)={'veth1_to_team\x00', {0x2, 0x4e22, @broadcast}}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x204080, 0x0) ioctl$CAPI_GET_SERIAL(r4, 0xc0044308, &(0x7f00000002c0)=0x3fff800000000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @remote}}, 0x5f, 0x8}, &(0x7f0000000240)=0x90) close(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 443.255113] binder: 14079 RLIMIT_NICE not set [ 443.259783] binder: 14077:14079 ioctl c0306201 200003c0 returned -14 02:26:51 executing program 4: [ 443.318405] binder: undelivered death notification, 0000000000000000 02:26:51 executing program 2: 02:26:51 executing program 1: 02:26:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c12") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:51 executing program 1: 02:26:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:51 executing program 2: 02:26:51 executing program 4: 02:26:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 443.825810] binder: 14103 RLIMIT_NICE not set [ 443.830513] binder: 14102:14103 ioctl c0306201 200003c0 returned -14 02:26:51 executing program 1: [ 443.872601] binder: undelivered death notification, 0000000000000000 02:26:52 executing program 2: 02:26:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c12") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:52 executing program 1: 02:26:52 executing program 4: 02:26:52 executing program 2: [ 444.236660] binder: 14118 RLIMIT_NICE not set [ 444.241385] binder: 14115:14118 ioctl c0306201 200003c0 returned -14 [ 444.314837] binder: undelivered death notification, 0000000000000000 02:26:52 executing program 2: 02:26:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="b9980000400f32c462752c99c10c00000f01cff20f00102e66470f5b2f470f017f000f23b0400f300f01c8450f32", 0x2e}], 0x1, 0x40, &(0x7f0000000100), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:52 executing program 1: 02:26:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c12") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:52 executing program 4: 02:26:52 executing program 2: 02:26:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 444.906634] binder: 14140 RLIMIT_NICE not set [ 444.911305] binder: 14139:14140 ioctl c0306201 200003c0 returned -14 02:26:53 executing program 1: [ 445.012667] binder: undelivered death notification, 0000000000000000 02:26:53 executing program 4: 02:26:53 executing program 2: 02:26:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x300, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xf8ab58f1a4762873}, 0x4000) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:53 executing program 1: 02:26:53 executing program 4: [ 445.486303] binder: 14160 RLIMIT_NICE not set [ 445.490972] binder: 14157:14160 ioctl c0306201 200003c0 returned -14 [ 445.580622] binder: undelivered death notification, 0000000000000000 02:26:53 executing program 2: 02:26:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:53 executing program 1: 02:26:53 executing program 4: 02:26:54 executing program 2: [ 446.027042] binder: 14177 RLIMIT_NICE not set [ 446.031821] binder: 14175:14177 ioctl c0306201 200003c0 returned -14 02:26:54 executing program 1: 02:26:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000200)={'bridge_slave_1\x00', @ifru_flags}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) socket$l2tp(0x18, 0x1, 0x1) r3 = open(&(0x7f0000000400)='./file0\x00', 0x800, 0x8) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x3858d282e979a3b9}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2000000000}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x14) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) close(r5) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1}, &(0x7f0000000280)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f00000002c0)={@rand_addr="29d85a065ab447e8b1f81bff48844a7d", 0x7a, r10}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) r11 = fcntl$dupfd(r7, 0x0, r8) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x405, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000300)={r12, 0xcf, "871d5a2e50a553250d71c4922dfa1252d71b62c3185f10aff2db6e41d880b07887d97feb98b9044dedb2062d16034ed13e035e4c8dee472ddaece1e7589a57a4731f53e90e4c18951619727e7c6bf1337029dbd5cc378fd2e16e1ef308e7942a19b63a2a8cf23327c1ae408c559373f5f5850c4898742b3bef09827ed8cfe43cb6d113fcabd8bd0f739c4267f26976168ce5df18080de7004a4164c5c97a939423a0aac1a8986665a6b7d26a7e99b196d1dc6a097c61a64075d1deed7754edb36caa41e8b698e9598b7bb3dc178aa3"}, &(0x7f0000000140)=0xd7) eventfd(0x1cd) [ 446.072527] binder: undelivered death notification, 0000000000000000 02:26:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:54 executing program 4: 02:26:54 executing program 2: 02:26:54 executing program 1: [ 446.379971] binder: 14191 RLIMIT_NICE not set [ 446.384956] binder: 14189:14191 ioctl c0306201 200003c0 returned -14 [ 446.412094] binder: undelivered death notification, 0000000000000000 02:26:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:54 executing program 4: 02:26:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:54 executing program 1: 02:26:54 executing program 2: 02:26:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1a, 0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x3ff, 0x80000000, 0x1, 0x80000001, 0x7fffffff, 0x20, 0x4433, 0x8, 0x8, 0x0, 0x67ec4bca}, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:54 executing program 4: [ 446.817479] binder: 14208 RLIMIT_NICE not set [ 446.822289] binder: 14207:14208 ioctl c0306201 200003c0 returned -14 02:26:54 executing program 2: 02:26:54 executing program 1: [ 446.914377] binder: undelivered death notification, 0000000000000000 02:26:55 executing program 2: 02:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f00000000c0)) 02:26:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 447.285759] binder: 14229 RLIMIT_NICE not set [ 447.290516] binder: 14228:14229 ioctl c0306201 200003c0 returned -14 [ 447.312424] sock: process `syz-executor1' is using obsolete getsockopt SO_BSDCOMPAT 02:26:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xe) write$P9_RREADDIR(r2, &(0x7f0000000180)={0x68, 0x29, 0x0, {0x4, [{{}, 0x0, 0x1000, 0x7, './file0'}, {{0x0, 0x4}, 0x0, 0x0, 0x7, './file0'}, {{0x0, 0x1}, 0x8, 0x1, 0x7, './file0'}]}}, 0x68) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) creat(&(0x7f0000000140)='./file0\x00', 0x0) [ 447.331284] binder: undelivered death notification, 0000000000000000 02:26:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x40) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x2a0, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_BEARER={0x128, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffffffffffff04f5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x25}, 0x100000000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x2a}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x16}, 0xffffffffffffff01}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8000, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb333, @ipv4={[], [], @multicast1}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @local, 0x1000}}}}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x671c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VT_RELDISP(r6, 0x5605) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000500)=0xffffffff, 0x4) 02:26:55 executing program 2: 02:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:55 executing program 1: 02:26:55 executing program 2: 02:26:55 executing program 1: [ 447.688309] binder: 14250 RLIMIT_NICE not set [ 447.693293] binder: 14249:14250 ioctl c0306201 200003c0 returned -14 [ 447.712655] binder: undelivered death notification, 0000000000000000 02:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x10000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:56 executing program 2: unshare(0x4000400) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 02:26:56 executing program 1: unshare(0x0) link(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x20}, 0xf) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000ffeffffe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 448.218023] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:26:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8001) 02:26:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5385, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0xfffffff, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:26:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x14000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baf80c66b8ba05a08366efbafc0ced66b92209000066b813488e9b66ba000000000f300f20d86635200000000f22d80f20e06635080000000f22e00f20d86635200000000f22d80f01d1ba4000b089ee0f01c90fc72e00a0dee3", 0x5a}], 0x1, 0x2, &(0x7f0000000180), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:56 executing program 2: setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 02:26:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0x7ff}, {0x80000006}]}, 0x10) 02:26:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xab61, 0x800) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1000, 0xffffffffffff424b, 0x6, 0x3ff}, {0x20, 0xfff, 0x2, 0x66}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 02:26:57 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 02:26:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:26:57 executing program 4: r0 = socket$inet6(0xa, 0x8000000000003, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') dup3(r0, r1, 0x0) [ 449.273791] binder: 14317:14318 transaction failed 29189/-22, size 40-8 line 2896 [ 449.281517] binder: 14317:14318 ioctl c0306201 20008000 returned -14 [ 449.378325] binder: 14317:14328 transaction failed 29189/-22, size 40-8 line 2896 [ 449.381478] binder: 14321:14323 Acquire 1 refcount change on invalid ref 0 ret -22 [ 449.386321] binder: 14317:14328 ioctl c0306201 20008000 returned -14 [ 449.437171] binder: 14321:14331 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 449.485485] binder: 14321:14323 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:26:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r3 = accept4$tipc(r1, 0x0, &(0x7f0000000140), 0x800) r4 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x1, 0x10000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) futex(&(0x7f0000000240), 0x8c, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)=0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqsrc(r6, 0x0, 0x2f, &(0x7f0000000080)={@initdev, @multicast2, @remote}, &(0x7f00000000c0)=0xc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c12") mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 449.531476] binder: 14321:14331 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) 02:26:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) getresgid(0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x4) syz_open_pts(r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 449.767904] binder: 14339:14344 transaction failed 29189/-22, size 40-8 line 2896 [ 449.773452] binder: 14342:14343 transaction failed 29189/-22, size 40-8 line 2896 [ 449.776027] binder: 14339:14344 ioctl c0306201 20008000 returned -14 [ 449.783603] binder: 14342:14343 ioctl c0306201 20008000 returned -14 02:26:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 449.918929] binder: 14342:14351 transaction failed 29189/-22, size 40-8 line 2896 [ 449.926939] binder: 14342:14351 ioctl c0306201 20008000 returned -14 02:26:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7ff, 0x2400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x6, 0x6}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:26:58 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x0, 0x9, 0x7, 0xad]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000480)={0xffffffffffffff00, 0x6}) setsockopt(r0, 0x8, 0x4, &(0x7f00000004c0)="923581e940d93f5381686c4c", 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x3, 0x0, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r3, 0xfffffffffffffff7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r4 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 02:26:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:26:58 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) [ 450.451209] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 450.489570] binder: 14372:14376 Acquire 1 refcount change on invalid ref 0 ret -22 [ 450.606911] binder: 14372:14376 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:26:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 450.729357] binder: 14372:14376 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:27:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101702, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000100)="e63c925b8ab3a6b49598e5c8e9da87f6693693826b666c21fcc233d1452e6f69c8f25ec541a64824ee0745fa4ea02ec7", &(0x7f0000000140)=""/118}, 0x18) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x10000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x129, 0x40, 0x0, 0x3a59cbfdc8cb2060) 02:27:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:03 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) ioctl$VT_DISALLOCATE(r1, 0x5608) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r4, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$P9_RSTATu(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x10, 0x2}}, 0x28) 02:27:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='veth0\x00') chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000107c) 02:27:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 455.355887] binder: 14398:14399 Acquire 1 refcount change on invalid ref 0 ret -22 [ 455.375170] binder: 14398:14399 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x44040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000004c0)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0\x00', 0x8, 0x1) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x81, 0x4000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1, 0x8001, 0x2, 0x9}, {0x14ff, 0x7fff, 0x4f, 0x2}, {0x0, 0x5, 0x4, 0x8e49}, {0x26, 0x5, 0x1f, 0x2}]}, 0x10) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@getae={0x174, 0x1f, 0x210, 0x70bd26, 0x25dfdbfe, {{@in=@broadcast, 0x4d4, 0xa, 0x7f}, @in6=@dev={0xfe, 0x80, [], 0x1d}, 0x0, 0x3501}, [@extra_flags={0x8, 0x18, 0x6}, @proto={0x8, 0x19, 0x3c}, @output_mark={0x8, 0x1d, 0x4}, @lastused={0xc, 0xf, 0x6}, @proto={0x8, 0x19, 0xff}, @output_mark={0x8, 0x1d, 0x200}, @extra_flags={0x8, 0x18, 0xb6fb}, @policy={0xac, 0x7, {{@in=@multicast1, @in6=@mcast1, 0x4e24, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x16, r5, r6}, {0x5, 0xa0d6, 0xf9af, 0xffffffff, 0xfffffffffffffffb, 0x2, 0x80000000, 0x7}, {0x10000, 0x7fffffff, 0x2, 0xc5}, 0x40, 0x6e6bb4, 0x0, 0x1, 0x1, 0x3}}, @algo_comp={0x4c, 0x3, {{'deflate\x00'}, 0x20, "44a33145"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 455.401563] binder: 14398:14399 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 455.429756] binder: 14398:14399 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 455.437140] binder: 14399 RLIMIT_NICE not set 02:27:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1004) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x200, 0x4002) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000100)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) sendmmsg$inet_sctp(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x4, @loopback, 0xffff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="5901f64799a405cef26988385c2e8a17cc46eff65ab9e41801adbff0c4768619d41ed5edc15dacfcfa26cea4d354e28001882c6f0350fa2419e038220540fbe2b4b4b5a656020d06b608306c1e7c4a40191164a0fd288fea325f21965b471c8a6379a298dd4f2dd33f3164574bff8d7b9b52a245faef9a5d08a0adf9efcdd29ce782783e91b08e6572f2a6e9768431c6ac81794f3f0d5127e0376ae869e4d214877cf45438d73ac55a4fbb9b0904e3201430f2a389f3abea6ba5b5df90bcdb9d932a80f49597165c0ebe42", 0xcb}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x24000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 456.429207] audit: type=1800 audit(1547432824.471:33): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor2" name="bus" dev="ramfs" ino=57437 res=0 [ 456.480942] audit: type=1800 audit(1547432824.491:34): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor2" name="bus" dev="ramfs" ino=56991 res=0 02:27:04 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x0, @local, 0x0, 0x0, 'ovf\x00'}, {@empty, 0x0, 0x0, 0x50, 0x7626}}, 0x44) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 02:27:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000200)=""/4096, &(0x7f0000000140)=0x1000) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[]) [ 456.989988] binder: 14459:14462 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 457.008181] binder: 14459:14462 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 457.033233] binder: 14459:14462 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 457.040560] binder: 14462 RLIMIT_NICE not set 02:27:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_FPEMU(0xa, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:05 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x27a0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 02:27:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:05 executing program 4: perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2}, 0x14) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[]) 02:27:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x145cba90, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x40004001fe) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:05 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0xfffffdff) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x1) sendto(r2, &(0x7f0000000cc0)="7589f0da892457ee3604b3303d1176a13baaebcab9eba210a07246127b486e98e3029104796460b1dfef95b0368b0b19c338b1306db81cea8edfc66a6212607f01496a9963ef1a83caee01bd72e85c40dd287a1055ca6b801959badb1253ae3a85a47b0ec39b760f063d4756614fc1d3e68b9f4f32be2652ce67d2e776b433331ad58b9d70c0f258e00b9d56ff7ecb14e6050c70da00c5006b8cffd8f169f2861e2df3efe13056d1babf3dde7a2a1a5cc8cb207e10f61e215d2935a43c0db2cef01e23933caac8c3ea", 0xc9, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$binfmt_elf64(r1, &(0x7f0000000dc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 02:27:06 executing program 4: perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 458.076736] binder: 14510:14512 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 458.115154] binder: 14510:14512 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:27:06 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) getresgid(&(0x7f0000000580), &(0x7f0000001640), 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) getgroups(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40), 0x0, 0x8000) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x4) syz_open_pts(r3, 0x0) ptrace$getenv(0x4201, r0, 0x80000003, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 458.144512] binder: 14510:14512 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 458.152138] binder: 14512 RLIMIT_NICE not set 02:27:06 executing program 4: perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4d5c, 0x1) setsockopt$inet_dccp_buf(r4, 0x21, 0x8f, &(0x7f00000000c0)="8c8bbe2d18ba994988531d1ebfcd740c1e110bd7bbb60442def1ce2fcb17a3c5c44c", 0x22) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:06 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x0, 0x9, 0x7, 0xad]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000480)={0xffffffffffffff00, 0x6}) setsockopt(r0, 0x8, 0x4, &(0x7f00000004c0)="923581e940d93f5381686c4c", 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r3, 0xfffffffffffffff7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r4 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 02:27:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 459.285425] binder: 14536:14539 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:07 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x7, 0xd, &(0x7f0000035000/0x2000)=nil, 0x10001}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:08 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:08 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) 02:27:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 462.630788] binder: 14585:14586 ioctl c0306201 0 returned -14 [ 462.639636] binder_thread_write: 2 callbacks suppressed [ 462.639676] binder: 14585:14586 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 462.702456] binder: 14585:14586 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 462.740576] binder: 14585:14586 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:10 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x400000000007) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x4) shmdt(0x0) 02:27:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20c403, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400202) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) add_key$user(0x0, &(0x7f0000000100)={'syz'}, &(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, 0x0) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x200408c0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000300)={0x5, 0x0, 0x7f3, 0x80000001}) lookup_dcookie(0x9, &(0x7f0000000440)=""/139, 0x8b) 02:27:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) 02:27:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x210000, 0x0) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x10000) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x1, 0xfffffffff0009000, 0x100000000}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) 02:27:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc94255b102d1549daa64972d96825e3563d093c69cebc5e9cf8b0a666abbe013f36e5770662537a8204b078f5de3a2f0db776847d5e3df7e0f5"], 0x86) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 463.720693] binder: 14638:14642 ioctl c0306201 0 returned -14 [ 463.751393] binder: 14638:14642 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffec4) [ 463.825272] binder: 14638:14642 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:27:11 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) [ 463.877751] binder: 14638:14646 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 463.885179] binder: 14646 RLIMIT_NICE not set 02:27:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:12 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) clone(0xa102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) 02:27:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:12 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='stat\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xe0) [ 464.467509] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 02:27:12 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x0, 0x9, 0x7, 0xad]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000600)=@sack_info={0x0, 0xd}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x20}, 0x260a}}, 0x4, 0x9c3a}, &(0x7f0000000780)=0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000480)={0xffffffffffffff00, 0x6}) setsockopt(r0, 0x8, 0x4, &(0x7f00000004c0)="923581e940d93f5381686c4c", 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x3, 0x0, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) [ 464.509929] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 02:27:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000100), 0x2) 02:27:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 464.778652] binder: 14691:14692 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 464.807620] binder: 14691:14692 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:27:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x40044591, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 464.841214] binder: 14691:14692 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 464.848645] binder: 14692 RLIMIT_NICE not set [ 464.965534] misc userio: No port type given on /dev/userio 02:27:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 465.007190] misc userio: The device must be registered before sending interrupts 02:27:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x40, &(0x7f0000000180), 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:27:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:13 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0984124, 0x0) [ 465.470039] binder: 14721:14722 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:27:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:13 executing program 0: socketpair(0x1, 0x5, 0x5, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000240)='nfs\x00f`\xe4k\xe0\xb0\xc6\xefj\x7fCB\xad%0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x0, 0x9, 0x7, 0xad]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) r3 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000005c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1000, 0xfff, 0x4000000005, 0x3, 0xffffffffffffffff}) 02:27:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x84) 02:27:14 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v2, 0x14, 0x0) write$P9_RVERSION(r0, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 02:27:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:15 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f0000000400)=""/70, 0x413) signalfd(r0, &(0x7f0000000040), 0x8) read(r1, 0x0, 0x0) [ 466.940861] binder: 14789 RLIMIT_NICE not set 02:27:15 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/sockcreate\x00') write$selinux_attr(r0, 0x0, 0x0) 02:27:15 executing program 0: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x400020015) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x9f8a3f825809bd38) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0xc}) clone(0x3ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000001c0)) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0xffffffffffffffff, 0xedc000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) exit(0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000240)) lstat(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x0, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 02:27:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) 02:27:15 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="9b"], 0x1) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x1013, r0, 0x0) 02:27:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:16 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x0, 0x9, 0x7, 0xad]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000005c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x1000, 0xfff, 0x4000000005, 0x3, 0xffffffffffffffff}) [ 467.924050] binder_thread_write: 5 callbacks suppressed [ 467.924076] binder: 14833:14834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 467.957312] binder: 14833:14834 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:27:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc94255b102d1549daa64972d96825e3563d093c69cebc5e9cf8b0a666abbe013f36e5770662537a8204b078f5de3a2f0db776847d5e3df7e0f5"], 0x86) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 467.983187] binder: 14833:14834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 467.990484] binder: 14834 RLIMIT_NICE not set 02:27:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:16 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000000)={@empty=[0xe80, 0x0, 0x600], @broadcast, [], {@generic={0x8864}}}, 0x0) 02:27:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 02:27:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000400)=""/78, 0x4e}], 0x1) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03Z\x00\x02\xe6\x03\xca\x00', @ifru_mtu=0x1}) dup2(r1, r2) 02:27:17 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000002c0)={0xd9, 0x6, 0x0, {0x1, 0x0, 0xb0, 0x0, '\xe2\xabI&\xe1\xb7Y\nt\a\xc1\xd4\xdb\x1fR\x91\xdeK\xf1\xb1\xe4sn*\xdc\x13\x95\t9\xf4p:\x1b\t\xb1\xc0\x99I[{\f\xbc ;\xaf\xc4\x170\xf4\xae\xf9\x7fc\xae#\\\xe0\'\x89KD\x97O\xc1\x9d\xc9zkv4q\xa9\xa9\x1e\x8aPK\x01\x87\x8bZ\ah\xf4\x18bn\xf5 \x1c.\f\x8e\x06\xa8\r\xb5\v\xe6)<\x99N\xc4c\xec=#x\xb0Z\xfc\xf6\xa9\xb5\xdfV\xbd\x8bxo\xfd`\x14W\xca\xa1\xfeB\xe0\xdb\x1c\x8d\xc7\x83t-\xbd.\x80\x1b{`|\x1ah\xe4\xd9\xff\xfd\xe0\x90\x13\xd6&Zu\x1e,\x93f\xbeb\x1c\x8ed#\rq\xd9\\\xff\x8a\xe5*\x03'}}, 0xd9) gettid() 02:27:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 469.169734] binder: 14879:14884 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 469.203041] binder: 14879:14884 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:27:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000000)=@ethtool_cmd={0xb}}) 02:27:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 469.237722] binder: 14879:14884 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 469.245134] binder: 14884 RLIMIT_NICE not set 02:27:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) 02:27:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) 02:27:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 02:27:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) 02:27:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x40044591, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:27:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) 02:27:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) [ 472.851362] binder: 14919:14926 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) [ 472.895685] binder: 14919:14926 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 02:27:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, &(0x7f0000000080)) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:27:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8, 0x0) [ 473.007910] binder: 14919:14926 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 02:27:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000005c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x4000000005}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 02:27:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 02:27:21 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000003c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0xb44, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000280)=""/249) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) 02:27:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="9b"], 0x1) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x1013, r0, 0x4000) 02:27:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9e, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 02:27:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 02:27:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:21 executing program 1: clone(0x400003102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x1f) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e40), 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) [ 473.965051] binder: 14983:14984 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 473.979013] ptrace attach of "/root/syz-executor1"[14987] was attempted by "/root/syz-executor1"[14988] 02:27:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9e, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 02:27:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x4c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000fdff632b116dd932403d11b87c8f05000000100cbc5ee987fe24b500ff02000013676c798b9385ac0487cb6129e1d00000008000000000000000000000ff000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f51000000000000000000"], 0x1) 02:27:22 executing program 4: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000003c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/249) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) [ 474.063591] binder: 14983:14984 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc"], 0x4d) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:27:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:27:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) 02:27:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc"], 0x4d) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), 0x0) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) memfd_create(0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:27:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) getresgid(&(0x7f0000000580), &(0x7f0000001640), 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) getgroups(0x1, &(0x7f0000002b40)=[0xee00]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8000) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x4) syz_open_pts(r3, 0x0) ptrace$getenv(0x4201, r0, 0x80000003, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 477.039419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 477.068154] binder: 15012:15018 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 477.104531] binder: 15012:15018 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:25 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000380)=""/238) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000003c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3, 0x0) r1 = shmget$private(0x0, 0x3000, 0xb44, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000280)=""/249) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 02:27:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done={0x40086310, 0x2000}], 0x0, 0x712000, 0x0}) 02:27:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0f85403, &(0x7f0000000140)) 02:27:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 482.065114] binder: 15054 RLIMIT_NICE not set [ 482.132688] binder: 15044:15054 BC_DEAD_BINDER_DONE 0000000000002000 not found [ 482.177362] binder: 15055:15063 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 482.232048] binder: BINDER_SET_CONTEXT_MGR already set [ 482.237378] binder: 15044:15049 ioctl 40046207 0 returned -16 [ 482.251547] binder: 15055:15056 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:30 executing program 2: setrlimit(0x7, &(0x7f0000000040)={0x4, 0x538b}) socketpair(0x0, 0x0, 0x0, 0x0) [ 482.277728] binder: 15044:15062 unknown command 536872576 [ 482.283532] binder: 15044:15062 ioctl c0306201 20008fd0 returned -22 [ 482.305169] binder: 15064 RLIMIT_NICE not set [ 482.310290] binder: 15044:15062 BC_DEAD_BINDER_DONE 0000000000002000 not found 02:27:30 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20601, 0x0) write$binfmt_aout(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x800) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) 02:27:30 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) getgroups(0x1, &(0x7f0000002b40)=[0xee00]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)="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", 0xca2}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8000) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x4) syz_open_pts(r3, 0x0) ptrace$getenv(0x4201, r0, 0x80000003, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 02:27:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:30 executing program 4: accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) 02:27:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x3, &(0x7f00000000c0), 0x8) [ 482.643698] binder: 15068:15069 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 482.687174] binder: 15069 RLIMIT_NICE not set [ 482.691969] binder: 15068:15069 ioctl c0306201 200003c0 returned -14 02:27:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x0, r1, 0x0, 0x0, 0x0, 0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 02:27:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:31 executing program 4: syz_emit_ethernet(0x348, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}], {@generic={0x8864}}}, 0x0) [ 483.155826] binder: 15092:15093 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc"], 0x4d) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, &(0x7f0000000080)) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:27:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc"], 0x4d) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, &(0x7f0000000080)) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:27:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:31 executing program 4: syz_emit_ethernet(0x348, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}], {@generic={0x8864}}}, 0x0) [ 483.876112] binder: 15109:15121 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:32 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xc00000010007a) ioctl$KVM_SET_CPUID(r0, 0x802c550a, 0x0) 02:27:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000b80)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 02:27:34 executing program 2: syz_emit_ethernet(0x12, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}], {@generic={0x8864}}}, 0x0) 02:27:34 executing program 4: syz_emit_ethernet(0x348, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}], {@generic={0x8864}}}, 0x0) 02:27:34 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 486.580740] binder: 15148:15149 ioctl c0306201 0 returned -14 02:27:34 executing program 2: 02:27:34 executing program 1: [ 486.634256] binder: 15148:15149 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:34 executing program 5: 02:27:34 executing program 4: syz_emit_ethernet(0x348, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}], {@generic={0x8864}}}, 0x0) 02:27:34 executing program 0: 02:27:34 executing program 2: 02:27:35 executing program 1: ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000380)=""/238) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000003c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 02:27:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:35 executing program 5: 02:27:35 executing program 2: 02:27:35 executing program 0: [ 487.114938] binder: 15166:15167 ioctl c0306201 0 returned -14 02:27:35 executing program 1: [ 487.171283] binder: 15166:15167 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:35 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 02:27:35 executing program 2: 02:27:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:35 executing program 5: 02:27:35 executing program 0: 02:27:35 executing program 2: 02:27:35 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 02:27:35 executing program 1: [ 487.664728] binder: 15189:15190 ioctl c0306201 0 returned -14 [ 487.698903] binder: 15189:15190 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 487.742455] binder: 15190 RLIMIT_NICE not set [ 487.747222] binder: 15189:15190 ioctl c0306201 200003c0 returned -14 02:27:35 executing program 5: 02:27:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:35 executing program 0: 02:27:36 executing program 1: 02:27:36 executing program 2: 02:27:36 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) [ 488.089126] binder: 15204:15205 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:36 executing program 0: [ 488.166246] binder: 15205 RLIMIT_NICE not set [ 488.171052] binder: 15204:15205 ioctl c0306201 200003c0 returned -14 02:27:36 executing program 5: 02:27:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:36 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [], {@generic={0x8864}}}, 0x0) 02:27:36 executing program 1: 02:27:36 executing program 2: 02:27:36 executing program 0: 02:27:36 executing program 1: 02:27:36 executing program 5: [ 488.593764] binder: 15223:15224 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:36 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [], {@generic={0x8864}}}, 0x0) [ 488.682415] binder: 15224 RLIMIT_NICE not set [ 488.687122] binder: 15223:15224 ioctl c0306201 200003c0 returned -14 02:27:36 executing program 1: 02:27:36 executing program 2: 02:27:37 executing program 0: 02:27:37 executing program 5: 02:27:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:37 executing program 1: 02:27:37 executing program 2: 02:27:37 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [], {@generic={0x8864}}}, 0x0) 02:27:37 executing program 5: [ 489.177545] binder: 15242:15243 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 489.227745] binder: 15243 RLIMIT_NICE not set [ 489.232653] binder: 15242:15243 ioctl c0306201 200003c0 returned -14 02:27:37 executing program 0: 02:27:37 executing program 1: 02:27:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:37 executing program 5: 02:27:37 executing program 4: syz_emit_ethernet(0x348, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}]}, 0x0) 02:27:37 executing program 2: 02:27:37 executing program 1: [ 489.645056] binder: 15258:15260 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:37 executing program 0: 02:27:37 executing program 5: 02:27:37 executing program 4: syz_emit_ethernet(0x348, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}]}, 0x0) 02:27:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:38 executing program 2: 02:27:38 executing program 1: 02:27:38 executing program 0: 02:27:38 executing program 5: [ 490.060959] binder: 15277:15278 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:38 executing program 4: syz_emit_ethernet(0x348, &(0x7f0000000040)={@empty=[0xe80, 0x0, 0x600], @broadcast, [{}]}, 0x0) 02:27:38 executing program 0: 02:27:38 executing program 2: 02:27:38 executing program 1: 02:27:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:38 executing program 4: 02:27:38 executing program 5: 02:27:38 executing program 2: [ 490.591933] binder: 15298:15300 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:38 executing program 4: 02:27:38 executing program 5: 02:27:38 executing program 0: 02:27:38 executing program 1: 02:27:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:39 executing program 2: 02:27:39 executing program 5: 02:27:39 executing program 4: 02:27:39 executing program 1: 02:27:39 executing program 0: 02:27:39 executing program 4: 02:27:39 executing program 2: 02:27:39 executing program 5: 02:27:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40046304}], 0xfffffdfd, 0x712000, 0x0}) 02:27:39 executing program 0: clock_gettime(0x1, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) 02:27:39 executing program 2: [ 491.607078] binder: 15329:15332 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 491.615130] binder: 15329:15332 unknown command 0 [ 491.620054] binder: 15329:15332 ioctl c0306201 200003c0 returned -22 [ 491.699806] binder: 15329:15337 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 491.707853] binder: 15329:15337 unknown command 0 [ 491.713036] binder: 15329:15337 ioctl c0306201 200003c0 returned -22 02:27:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:39 executing program 4: 02:27:39 executing program 5: 02:27:39 executing program 0: 02:27:39 executing program 2: 02:27:39 executing program 1: [ 491.803305] binder: undelivered death notification, 0000000000000000 02:27:40 executing program 5: 02:27:40 executing program 0: 02:27:40 executing program 4: 02:27:40 executing program 2: 02:27:40 executing program 1: 02:27:40 executing program 5: 02:27:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:40 executing program 4: 02:27:40 executing program 0: 02:27:40 executing program 1: 02:27:40 executing program 2: 02:27:40 executing program 5: [ 492.791552] binder: undelivered death notification, 0000000000000000 02:27:41 executing program 2: 02:27:41 executing program 5: 02:27:41 executing program 4: 02:27:41 executing program 0: 02:27:41 executing program 1: 02:27:41 executing program 2: 02:27:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:41 executing program 5: 02:27:41 executing program 4: 02:27:41 executing program 0: 02:27:41 executing program 1: 02:27:41 executing program 2: [ 493.766167] binder: undelivered death notification, 0000000000000000 02:27:41 executing program 5: 02:27:42 executing program 0: 02:27:42 executing program 4: 02:27:42 executing program 1: [ 493.989766] binder: 15393:15394 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 494.020734] binder: 15393:15394 ioctl c0306201 0 returned -14 02:27:42 executing program 2: [ 494.072669] binder: 15393:15394 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 494.149869] binder: 15393:15394 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:42 executing program 5: 02:27:42 executing program 0: 02:27:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:42 executing program 4: 02:27:42 executing program 2: 02:27:42 executing program 1: 02:27:42 executing program 5: 02:27:42 executing program 0: 02:27:43 executing program 2: 02:27:43 executing program 1: [ 494.924023] binder: 15417:15418 ioctl c0306201 0 returned -14 02:27:43 executing program 5: 02:27:43 executing program 4: 02:27:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)="2e0000002800813ee45ae087185082cf0224b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 02:27:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000b90008000100ac1414aa"], 0x1}}, 0x0) 02:27:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:43 executing program 5: 02:27:43 executing program 1: 02:27:43 executing program 4: 02:27:43 executing program 2: 02:27:43 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) close(r0) [ 495.672295] binder: undelivered death notification, 0000000000000000 02:27:43 executing program 5: syz_open_procfs(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x32c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 02:27:43 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1f0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) [ 495.855829] binder: 15444:15445 ioctl c0306201 0 returned -14 02:27:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000040), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x800, 'lo\x00', 'teql0\x00', 'ip6_vti0\x00', 'bcsf0\x00', @broadcast, [], @dev, [], 0xb8, 0xb8, 0xe8, [@ip={'ip\x00', 0x20, {{@remote, @broadcast, 0x0, 0x0, 0x0, 0x6}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) 02:27:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 02:27:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x20001) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x500000000) 02:27:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x10000000, &(0x7f0000009000)}) [ 496.452043] binder: 15469:15471 transaction failed 29189/-22, size 40-8 line 2896 [ 496.459767] binder: 15469:15471 ioctl c0306201 20008000 returned -14 [ 496.469781] binder: 15469:15471 transaction failed 29189/-22, size 40-8 line 2896 [ 496.477650] binder: 15469:15471 ioctl c0306201 20008000 returned -14 02:27:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) ioctl$TCGETA(r2, 0x402c542b, &(0x7f0000000180)) 02:27:44 executing program 4: sched_yield() recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_TSC(0x19, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0), 0x200000000000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x0, 0x0) fcntl$getflags(r1, 0x40b) r3 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000180)) sync_file_range(r4, 0x9, 0x0, 0x1) r5 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000002, &(0x7f0000000200)) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1b) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000380)={@empty, @empty, 0x0}, &(0x7f0000000400)=0xc) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000440)={@local, @multicast1, r6}, 0xc) gettid() ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) 02:27:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) [ 496.614444] binder: undelivered death notification, 0000000000000000 02:27:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x712000, 0x0}) [ 496.754925] binder: 15481:15482 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 496.786901] binder: 15482 RLIMIT_NICE not set [ 496.830397] binder: 15481:15482 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x712000, 0x0}) 02:27:45 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x400, 0x9, 0x7, 0xad]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r2, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000480)={0xffffffffffffff00, 0x6}) setsockopt(r0, 0x8, 0x4, &(0x7f00000004c0)="923581e940d93f5381686c4c", 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x3, 0x0, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r3, 0xfffffffffffffff7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r4 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 02:27:45 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x7ffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="660fd88e05000f01dfc7f80800baf80c66b8228c428b66efbafc0cb03aeebaf80c66b8145b478366efbafc0ced66b9800000c00f326635000100000f300f08660f380306f2000ff696006066b9250a00000f32", 0x53}], 0x1, 0x51, 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x3}, 0x28) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 02:27:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000240)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0\x00') chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) 02:27:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x40000000003, 0x4, 0x4, 0x7cb, 0x0, 0xffffffffffffff9c}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d", 0x100000001}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000880)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000006c0)='3Q\x00\x00\xbb]\xf0\xb8\xcf8k$W8', 0x26e1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000700)='memory.events\x00', 0x7a05, 0x1700) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r6, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x15, &(0x7f0000000940)=ANY=[@ANYBLOB="4596ac7aff1199505b0630492a768b88b40cda95479762f1562280ae7688b9b2743745e0ea77e4b12af50b9fc1443480c30365b87da044980c4922f960f697756994d7b1c37114ab16173aabbba146314be703c38f65ef5becf88f17292c08b2041130006f9e888b6eb4801f000000000000003b08907bed08f7c988d1786611d3308053c8ad1ee70100010000000000386f3461b3f6cb68666eb083fa1f0000000000000000000000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1f, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f00)={&(0x7f00000003c0)='/*cgroup\x00', r4}, 0x10) recvmsg$kcm(r4, &(0x7f0000001c80)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0xffffffffffffff7b, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f0000000a00)=""/198, 0xc6}, {&(0x7f0000000800)=""/59, 0x3b}, {&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000001a00)=""/222, 0xde}, {&(0x7f0000001b00)=""/23, 0x17}, {&(0x7f0000001b40)=""/27, 0x1b}], 0x9, &(0x7f0000001c40)=""/38, 0x26, 0x3f}, 0x40012022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) socketpair(0x7, 0x6, 0x9, &(0x7f0000000640)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) socketpair(0x8, 0x3, 0x7fff, &(0x7f00000008c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000000, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xffffffffffffffff, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x6, 0x2000000000007}, 0x0, 0x0, r3, 0x10000002) openat$cgroup_ro(r8, &(0x7f0000001f80)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000004c0)=0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x33f) ioctl$TUNSETLINK(r4, 0x400454cd, 0x20d) socketpair(0x8, 0x803, 0x541e, &(0x7f00000005c0)) openat$cgroup_ro(r9, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) [ 497.056446] binder: 15493:15494 Acquire 1 refcount change on invalid ref 0 ret -22 [ 497.132487] binder: 15493:15494 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 497.186730] binder: 15493:15494 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 497.235566] binder: 15493:15504 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 497.279984] binder: 15493:15504 Acquire 1 refcount change on invalid ref 0 ret -22 [ 497.311457] binder: 15493:15504 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 497.347331] binder: 15493:15504 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 497.394458] binder: 15493:15494 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:27:45 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x400, 0x9, 0x7, 0xad]}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r3, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000480)={0xffffffffffffff00, 0x6}) setsockopt(r0, 0x8, 0x4, &(0x7f00000004c0)="923581e940d93f5381686c4c", 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x3, 0x10000, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r4, 0xfffffffffffffff7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r5 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) [ 497.601255] binder: undelivered death notification, 0000000000000000 02:27:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) 02:27:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0xfffffdfd, 0x712000, 0x0}) 02:27:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) 02:27:46 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 498.088849] binder: 15540:15541 Acquire 1 refcount change on invalid ref 0 ret -22 [ 498.134697] binder: 15540:15541 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 498.213590] binder: 15540:15548 Acquire 1 refcount change on invalid ref 0 ret -22 02:27:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) [ 498.258287] binder: 15540:15541 BC_DEAD_BINDER_DONE 0000000000000000 not found 02:27:46 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 02:27:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 498.589369] binder: 15561:15562 Acquire 1 refcount change on invalid ref 0 ret -22 [ 498.624070] binder: 15561:15562 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 498.671398] binder: 15561:15564 Acquire 1 refcount change on invalid ref 0 ret -22 [ 498.702424] binder: undelivered death notification, 0000000000000000 02:27:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1f0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x10000, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000600)={0x7, "1669593b48ce333524384057b67e065906d61df5cf9790dd9b71047693c9fe36", 0x3, 0x8, 0x2, 0xc00000, 0x4000000}) recvfrom(r0, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) 02:27:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 02:27:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x10, 0x4, 0x13, 0x0, r1}, 0x2c) unshare(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000200)="bd295dcd327d8d381585d0d833e03e78eed72d17e47c4c6c3dc3d3090b39", 0x0, 0x2}, 0x20) 02:27:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0xfc3e}, 0x3f4d7e7c) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 02:27:47 executing program 1: clone(0x400003102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x1f) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}], 0x1, 0x4000040) ptrace$cont(0x18, r0, 0x0, 0x0) 02:27:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0xffffff02}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 02:27:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 02:27:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) [ 499.781336] ptrace attach of "/root/syz-executor1"[15590] was attempted by "/root/syz-executor1"[15593] 02:27:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x712000, 0x0}) 02:27:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x210) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 499.965750] binder: 15601:15602 Acquire 1 refcount change on invalid ref 0 ret -22 [ 500.035634] binder: 15601:15602 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 500.057310] binder: 15601:15602 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 500.092461] binder: 15601:15602 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 500.099832] binder: 15602 RLIMIT_NICE not set [ 500.242415] binder: undelivered death notification, 0000000000000000 02:27:48 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0xfc3e}, 0x3f4d7e7c) 02:27:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9e, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:27:48 executing program 5: r0 = socket$inet(0x2, 0x800001000000003, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) 02:27:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:48 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="39000000000000000000006b92068a402905470484d1000000000d6bd6a8f2972d26733e4b4238252b92314c0000615dace1ad9831e39dd708"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 02:27:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000002c0)="bbf85c7580c024c86f3887c96de37c0a25e30b61a4ff2f4056012d5227143d3d04445d185432ce689063c5a8d6ceae03c17d3104971d7b171c486af031d0d0517a1dea9b3a1f7b8653910dfc9d201988ad67aa6599f48bf9eba99c294502e38c03cdacd1a318b8e1cf75dee188630a0cca6b57916bf9db2b263f9160f7fd742b5f773525054150573e7cb14c258d51d7faa36e691e7bf4e7eb318aac04c50566191e16ccd111049905e2d1691b607121451d4c763d4549312e333e593c48c9aff126d3088b4011d731531d82aaaf7bcadd348dc461481790f170b6942c556345f14deb20565aa909f96f9b1155e0684756fbdd") write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x5}, 0xf) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setaffinity(0x0, 0xfffffffffffffffd, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x0, 0x0) 02:27:48 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000040), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) [ 500.729819] binder: 15601:15604 Acquire 1 refcount change on invalid ref 0 ret -22 [ 500.772936] binder: 15601:15636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 500.797188] binder: 15601:15604 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 500.815385] binder: 15601:15636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:27:49 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102801ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:27:49 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) [ 500.940113] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 02:27:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) [ 501.008735] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 501.272204] binder: undelivered death notification, 0000000000000000 02:27:49 executing program 4: 02:27:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x8000, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) ioctl(r1, 0x8915, &(0x7f00000006c0)="153f6234488dd25d766070f3392a6dc5baed973b86d81ef06155ecac34fea4b5298378d50b5fbb3650d5b291fd190b97699f5d7e7bfcb68e4d179f392396460835a81f20e8e2d7f1492a3437d64a3b844428462510753e35b6f8cd645f974093c1dfead615c3035ae69a68efde535a9f869efbf0d841614c91a7a9b0a66b250a08b7ca68d992ada345a166fd45989761b56d4e9926a6627295f5d4a91e9247b12ec87cd88ab63b141a06faba3dc616f554c92ce73555e85fe434cabd30bee30eac09c79ae0ba95f04320528059ccaa371681b1c7cffa120e260af60000000076bdbcb18d774f96e6ef70613a4db56f9df38b5e5f4c06431007e070f9e7df52a1839aee6786427b050cd3a07c8e2c9657cd9f2424d4daf9e50057b9edaa9585232e72e0b90f45d4daed4b5dad569a0237accff48b8154052b8e0d419cd0cb2d5568e0d7115dbdee6dd3b70f90094f27767d56f4b8001f082134") setsockopt$inet_tcp_int(r0, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) listen(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800, 0x2) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20004000, 0x0, 0x0) shutdown(r0, 0x1) 02:27:49 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) dup2(r0, r1) 02:27:49 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc94255b102d1549daa64972d96825e3563d093c69cebc5e9cf8b0a666abbe013f36e5770662537a8204b078f5de3a2f0db776847d5e3df7e0f597f89ac402bf40551a48915b74a5eeae493d32"], 0x99) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:27:49 executing program 4: 02:27:49 executing program 1: 02:27:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:50 executing program 4: 02:27:50 executing program 1: 02:27:50 executing program 1: 02:27:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) [ 502.326160] binder: undelivered death notification, 0000000000000000 02:27:50 executing program 5: 02:27:50 executing program 4: 02:27:50 executing program 1: 02:27:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:50 executing program 0: 02:27:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:50 executing program 4: 02:27:50 executing program 1: 02:27:50 executing program 5: 02:27:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:50 executing program 0: 02:27:51 executing program 5: 02:27:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:51 executing program 4: 02:27:51 executing program 1: [ 503.396578] binder: undelivered death notification, 0000000000000000 02:27:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:51 executing program 0: 02:27:51 executing program 4: 02:27:51 executing program 1: 02:27:51 executing program 5: 02:27:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:51 executing program 4: 02:27:51 executing program 5: 02:27:51 executing program 0: 02:27:51 executing program 1: 02:27:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:52 executing program 5: 02:27:52 executing program 4: 02:27:52 executing program 1: 02:27:52 executing program 0: 02:27:52 executing program 5: 02:27:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:52 executing program 4: 02:27:52 executing program 1: 02:27:52 executing program 0: 02:27:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:52 executing program 5: 02:27:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:52 executing program 1: 02:27:52 executing program 4: [ 504.844629] binder: 15789:15790 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 504.853467] binder: 15790 RLIMIT_NICE not set [ 504.858056] binder: 15789:15790 ioctl c0306201 200003c0 returned -14 02:27:52 executing program 0: 02:27:52 executing program 4: 02:27:53 executing program 1: 02:27:53 executing program 5: 02:27:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:53 executing program 1: 02:27:53 executing program 5: 02:27:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) 02:27:53 executing program 4: clone(0x80210a001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x400, 0x800) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0)) r1 = socket(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$packet(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$TIOCGSID(r0, 0x5429, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0xa15c, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000140), 0x4) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x1, 0xc000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000240)) [ 505.325642] binder: 15807:15808 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 505.334595] binder: 15808 RLIMIT_NICE not set [ 505.339174] binder: 15807:15808 ioctl c0306201 200003c0 returned -14 02:27:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40046307}], 0xfffffdfd, 0x712000, 0x0}) 02:27:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40406300}], 0xfffffdfd, 0x712000, 0x0}) [ 505.519803] binder: 15814:15818 BC_CLEAR_DEATH_NOTIFICATION death notification not active 02:27:53 executing program 4: [ 505.588788] binder: 15821:15822 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 505.597806] binder: 15822 RLIMIT_NICE not set [ 505.602552] binder: 15821:15822 ioctl c0306201 200003c0 returned -14 [ 505.623981] binder: 15816:15817 Acquire 1 refcount change on invalid ref 0 ret -22 [ 505.675107] binder: 15814:15827 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 505.714980] binder: 15816:15817 DecRefs 0 refcount change on invalid ref 0 ret -22 02:27:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 505.722928] binder: 15816:15817 unknown command 0 [ 505.727811] binder: 15816:15817 ioctl c0306201 200003c0 returned -22 [ 505.780392] binder: 15823:15829 transaction failed 29189/-22, size 0-0 line 2896 02:27:53 executing program 0: 02:27:53 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) chroot(0x0) mount(&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x800000088040, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="a7cffe593e99c00a8475c7cd3e2835bb", 0x10) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) [ 505.857560] binder: 15816:15834 Acquire 1 refcount change on invalid ref 0 ret -22 [ 505.884204] binder: 15823:15829 tried to acquire reference to desc 0, got 1 instead [ 505.911534] binder: 15816:15817 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 505.919516] binder: 15816:15817 unknown command 0 [ 505.924579] binder: 15816:15817 ioctl c0306201 200003c0 returned -22 02:27:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:54 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sigaltstack(&(0x7f00004b5000/0x3000)=nil, 0x0) read(r0, &(0x7f0000910000)=""/100, 0x64) 02:27:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) [ 506.038412] binder: 15838:15842 ioctl c0306201 0 returned -14 [ 506.066546] binder: 15838:15842 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 506.075483] binder: 15842 RLIMIT_NICE not set [ 506.080078] binder: 15838:15842 ioctl c0306201 200003c0 returned -14 02:27:54 executing program 4: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 02:27:54 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) request_key(0x0, &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 02:27:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:54 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000027c0)) getresgid(&(0x7f0000000580), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000017c0)}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8000) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x42, 0x0, 0x4) syz_open_pts(r3, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 506.410524] binder: 15858:15863 ioctl c0306201 0 returned -14 [ 506.439844] binder: 15858:15863 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 506.448766] binder: 15863 RLIMIT_NICE not set [ 506.453543] binder: 15858:15863 ioctl c0306201 200003c0 returned -14 02:27:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4804) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) ioctl$TCGETA(r2, 0x402c542b, &(0x7f0000000180)) 02:27:54 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:27:54 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) 02:27:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 507.017910] binder: 15881:15883 ioctl c0306201 0 returned -14 [ 507.048722] binder: 15881:15883 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 507.057785] binder: 15883 RLIMIT_NICE not set [ 507.062588] binder: 15881:15883 ioctl c0306201 200003c0 returned -14 02:27:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) 02:27:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x400000000007) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x4, 0x70, 0x200cc52f, 0x7d2, 0x8, 0x80000000, 0x0, 0x9, 0x2000, 0x5, 0x80000000, 0x3, 0x51e4d2b4, 0x6, 0x1, 0x10000, 0x4e1e36d0, 0x76f, 0x3, 0x9, 0xfff, 0x4800, 0x0, 0xa06e, 0x1, 0x8, 0x81, 0x1, 0xffffffffffffffff, 0x19, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x7, 0x0, 0x40, 0x2, @perf_config_ext={0x10001, 0x120}, 0x1000, 0xfff, 0x100, 0x0, 0xd5c, 0x8, 0x6}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) shmdt(0x0) 02:27:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:27:59 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x10000000000001cc, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 02:27:59 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0xfc94) [ 511.653139] binder: 15906:15911 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 511.662246] binder: 15911 RLIMIT_NICE not set [ 511.666826] binder: 15906:15911 ioctl c0306201 200003c0 returned -14 02:27:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0x0) 02:27:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @local}, 0xc) 02:28:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 02:28:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:00 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:28:00 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000100)=""/29, 0x1d) 02:28:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clone(0x6102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGNAME(r0, 0x80404506, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 512.169053] binder: 15923:15924 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 512.177897] binder: 15924 RLIMIT_NICE not set [ 512.182634] binder: 15923:15924 ioctl c0306201 200003c0 returned -14 02:28:00 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = dup2(r0, r0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/250, 0xfa}], 0x1) 02:28:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:00 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:28:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40086310, 0x2000}], 0xfffffdfd, 0x712000, 0x0}) [ 512.555677] binder: 15947:15948 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 512.564650] binder: 15948 RLIMIT_NICE not set [ 512.569234] binder: 15947:15948 ioctl c0306201 200003c0 returned -14 02:28:00 executing program 5: socket$inet(0x2, 0x802, 0x1) [ 512.641060] binder: 15952:15955 Acquire 1 refcount change on invalid ref 0 ret -22 02:28:00 executing program 0: r0 = socket$packet(0x11, 0x40800000000003, 0x300) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001940)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x4}]) [ 512.694952] binder: 15952:15956 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 512.726769] binder: 15955 RLIMIT_NICE not set 02:28:00 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:28:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 512.784588] binder: 15952:15956 BC_DEAD_BINDER_DONE 0000000000002000 not found 02:28:00 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) chroot(0x0) mount(&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x800000088040, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="a7cffe593e99c00a8475c7cd3e2835bb", 0x10) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) 02:28:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0xfffffdfd, 0x712000, 0x0}) [ 513.035199] binder: 15968:15970 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 513.044224] binder: 15970 RLIMIT_NICE not set [ 513.048793] binder: 15968:15970 ioctl c0306201 200003c0 returned -14 02:28:01 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:28:01 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xe13, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000440)='/dev/nbd#\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000c40)={{0x2, 0x3, 0x4, 0x238, 'syz0\x00', 0xfffffffffffffeff}, 0x0, 0x8, 0x2, r1, 0x1, 0xfc3c, 'syz1\x00', &(0x7f0000000540)=['vboxnet1&\x00'], 0xa, [], [0x400, 0x9, 0x7, 0xad]}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000007c0)=""/255) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000580)={0x14, 0x49, 0x2, {0x1, 0x3, 0x1}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x9, {"8aa70fe0aa0ede7c09c210101caa3dec"}, 0x1, 0x1af88dd4}, @ib={0x1b, 0x0, 0xfffffffffffffc00, {"85fd0808d02c405658db20b07f8916da"}, 0xfff, 0x3}}}, 0x118) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r3, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000480)={0xffffffffffffff00, 0x6}) setsockopt(r0, 0x8, 0x4, &(0x7f00000004c0)="923581e940d93f5381686c4c", 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x5, 0x3, 0x10000, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x100000000, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000080)=0x100) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r4, 0xfffffffffffffff7}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r5 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000d80)=""/170) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) [ 513.119194] binder: 15972:15974 Acquire 1 refcount change on invalid ref 0 ret -22 [ 513.175358] binder: 15972:15975 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 513.226201] binder: 15972:15974 Acquire 1 refcount change on invalid ref 0 ret -22 [ 513.268560] binder: 15972:15975 BC_DEAD_BINDER_DONE 0000000000000000 not found 02:28:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x1c000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:28:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x40081) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000f40a000000000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100), 0x8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000a80), 0x14) [ 513.425652] binder: 15952:15988 Acquire 1 refcount change on invalid ref 0 ret -22 [ 513.440005] binder: 15952:15988 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 513.508455] binder: 15987 RLIMIT_NICE not set [ 513.557297] binder: 15952:15986 BC_DEAD_BINDER_DONE 0000000000002000 not found [ 513.571048] binder: 15994:15995 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 513.579873] binder: 15995 RLIMIT_NICE not set [ 513.584672] binder: 15994:15995 ioctl c0306201 200003c0 returned -14 02:28:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000700)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'caif0\x00', 0x4801}) getpriority(0x1, 0x0) close(r1) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\t[\x00\x00\x00\x00\x00'], 0x1}}, 0x0) 02:28:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) [ 514.408430] binder: 16041:16043 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 514.417374] binder: 16043 RLIMIT_NICE not set [ 514.422148] binder: 16041:16043 ioctl c0306201 200003c0 returned -14 02:28:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000b80)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/189) 02:28:02 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000), &(0x7f000000dfe0)) r1 = epoll_create(0x4000000000f17b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) msgget(0x3, 0xc1) getpid() 02:28:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) [ 514.775180] binder: 16062:16064 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 514.784157] binder: 16064 RLIMIT_NICE not set [ 514.788728] binder: 16062:16064 ioctl c0306201 200003c0 returned -14 02:28:02 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0xfffffdff) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x1) sendto(r2, &(0x7f0000000cc0)="7589f0da892457ee3604b3303d1176a13baaebcab9eba210a07246127b486e98e3029104796460b1dfef95b0368b0b19c338b1306db81cea8edfc66a6212607f01496a9963ef1a83caee01bd72e85c40dd287a1055ca6b801959badb1253ae3a85a47b0ec39b760f063d4756614fc1d3e68b9f4f32be2652ce67d2e776b433331ad58b9d70c0f258e00b9d56ff7ecb14e6050c70da00c5006b8cffd8f169f2861e2df3efe13056d1babf3dde7a2a1a5cc8cb207e10f61e215d2935a43c0db2cef01e23933caac8c3ea", 0xc9, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$binfmt_elf64(r1, &(0x7f0000000dc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 02:28:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f31") 02:28:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000048c0)) 02:28:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 515.132616] protocol 88fb is buggy, dev hsr_slave_0 [ 515.138240] protocol 88fb is buggy, dev hsr_slave_1 [ 515.144228] protocol 88fb is buggy, dev hsr_slave_0 [ 515.149895] protocol 88fb is buggy, dev hsr_slave_1 [ 515.155935] protocol 88fb is buggy, dev hsr_slave_0 [ 515.161743] protocol 88fb is buggy, dev hsr_slave_1 02:28:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) 02:28:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:28:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 515.212665] protocol 88fb is buggy, dev hsr_slave_0 [ 515.218323] protocol 88fb is buggy, dev hsr_slave_1 [ 515.227971] binder: 16083:16084 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 515.236793] binder: 16083:16084 ioctl c0306201 200003c0 returned -14 02:28:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\xd1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7[\x1f\xe8\xaf\xb4N\xe8\xdf\v5\xa0\xfdj\x1f\x02\x00\xd3\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\x00\x00') sendfile(r1, r2, &(0x7f0000000180)=0xf0110, 0x100000001) [ 515.417263] binder: 16091:16093 ioctl c0306201 0 returned -14 [ 515.439071] binder: 16091:16093 ioctl c0306201 2000dfd0 returned -11 02:28:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 515.475893] binder: 16091:16097 ioctl c0306201 0 returned -14 02:28:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 02:28:03 executing program 0: r0 = gettid() socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, 0x0, &(0x7f0000000380)=0xffffffffffffffec) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20601, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, r3, r1) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x3f) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x8000, 0x3, 0x701f, 0xa, 0x9, 0x7, 0x3, 0x7}}) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000000c0)={0x7, 0x0, 0x8}, 0xc) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, 0x0) close(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x74) 02:28:03 executing program 4: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @local}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='nfs\x00'}, 0x10) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x28, &(0x7f0000000500)}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6577206465666175e371d1fc7365c40a4430b2ae43aa37fa723a47504c002030303030303030303030303030"], 0x1, 0x0) [ 515.819111] binder: 16108:16112 unknown command 25359 [ 515.824833] binder: 16108:16112 ioctl c0306201 20000040 returned -22 [ 515.834546] binder: 16108:16112 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 515.843543] binder: 16108:16112 ioctl c0306201 200003c0 returned -14 [ 515.909808] Unrecognized hibernate image header format! [ 515.915478] PM: Image mismatch: architecture specific data 02:28:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000b80)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xffffffffffffd171) 02:28:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) 02:28:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) [ 516.084949] Unrecognized hibernate image header format! [ 516.090489] PM: Image mismatch: architecture specific data [ 516.092477] protocol 88fb is buggy, dev hsr_slave_0 [ 516.101901] protocol 88fb is buggy, dev hsr_slave_1 02:28:04 executing program 4: creat(&(0x7f0000000700)='./bus\x00', 0x0) unlink(&(0x7f0000000040)='./bus\x00') [ 516.193540] binder: 16124:16125 unknown command 25359 [ 516.198789] binder: 16124:16125 ioctl c0306201 20000040 returned -22 02:28:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/bus\x00') mount(0x0, 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x800000088040, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) 02:28:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xfffffff, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:28:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:04 executing program 4: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000500)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) 02:28:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) 02:28:04 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x100000000000029e) r1 = dup2(r0, r0) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x0) 02:28:04 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='veth0\x00') chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000107c) 02:28:04 executing program 5: socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x72c8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000), &(0x7f000000dfe0)) r2 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r3 = msgget(0x3, 0xc1) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000280)=""/187) getpid() 02:28:04 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x21, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:28:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) 02:28:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 517.147791] binder: 16184:16186 unknown command 811791 [ 517.153445] binder: 16184:16186 ioctl c0306201 20000040 returned -22 [ 517.186057] binder_thread_write: 1 callbacks suppressed 02:28:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40086310, 0x2000}], 0xfffffdfd, 0x712000, 0x0}) [ 517.186080] binder: 16184:16186 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 517.200464] binder_set_nice: 4 callbacks suppressed [ 517.200480] binder: 16186 RLIMIT_NICE not set [ 517.210284] binder: 16184:16186 ioctl c0306201 200003c0 returned -14 02:28:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) 02:28:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my}) 02:28:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 517.445559] binder: 16197 RLIMIT_NICE not set [ 517.460466] binder: 16196:16197 BC_DEAD_BINDER_DONE 0000000000002000 not found [ 517.468189] binder: 16197 RLIMIT_NICE not set 02:28:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:28:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my}) [ 517.662984] binder: 16203:16204 unknown command 811791 [ 517.668591] binder: 16203:16204 ioctl c0306201 20000040 returned -22 [ 517.726639] binder: 16203:16204 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 517.735566] binder: 16204 RLIMIT_NICE not set [ 517.740142] binder: 16203:16204 ioctl c0306201 200003c0 returned -14 02:28:05 executing program 1: clone(0x80210a001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x0, 0x800) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0)) r2 = socket(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r2, &(0x7f0000000440)={r1, r0}) setsockopt(0xffffffffffffffff, 0x107, 0xa15c, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000140), 0x4) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x1, 0xc000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000140), 0x0, 0xfffffffffffffffd) clock_gettime(0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x297ef) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f0000000240)) [ 518.185777] binder: 16196:16226 unknown command 536872576 [ 518.191379] binder: 16196:16226 ioctl c0306201 20008fd0 returned -22 [ 518.210634] binder: 16227 RLIMIT_NICE not set [ 518.216237] binder: 16196:16227 BC_DEAD_BINDER_DONE 0000000000002000 not found [ 518.223980] binder: 16227 RLIMIT_NICE not set 02:28:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_netfilter(r0, &(0x7f0000001700)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20000010) 02:28:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my}) 02:28:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) 02:28:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00') writev(r0, &(0x7f0000001500)=[{&(0x7f0000001480)="b5", 0x1}], 0x1) 02:28:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0\x00') chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000107c) [ 518.979601] binder: 16231:16232 unknown command 811791 [ 518.985196] binder: 16231:16232 ioctl c0306201 20000040 returned -22 [ 519.033425] binder: 16231:16240 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:28:07 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/bus\x00') mount(&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x800000088040, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) 02:28:07 executing program 1: clone(0x80003102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) socket$inet6(0xa, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) wait4(0x0, 0x0, 0x0, 0x0) 02:28:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40046302}], 0xfffffdfd, 0x712000, 0x0}) 02:28:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000000e100f605eaa3000081d900"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 02:28:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 519.290872] binder: BC_ACQUIRE_RESULT not supported [ 519.296274] binder: 16251:16253 ioctl c0306201 200003c0 returned -22 02:28:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0xa002000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102801ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 519.481259] binder: undelivered death notification, 0000000000000000 02:28:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000040), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x800, 'lo\x00', 'teql0\x00', 'ip6_vti0\x00', 'bcsf0\x00', @broadcast, [], @dev, [], 0xb8, 0xb8, 0xe8, [@ip={'ip\x00', 0x20, {{@remote, @broadcast, 0x0, 0x0, 0x0, 0x6}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0xffffffffffffff26, 0x700, 0x0, 0x0) 02:28:08 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) dup2(r0, r1) 02:28:08 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_pts(r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 02:28:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) [ 519.986734] audit: type=1800 audit(1547432888.031:35): pid=16243 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor0" name="bus" dev="ramfs" ino=66063 res=0 [ 520.005634] audit: type=1800 audit(1547432888.031:36): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor0" name="bus" dev="ramfs" ino=67107 res=0 02:28:08 executing program 4: 02:28:08 executing program 0: [ 520.129261] binder: undelivered death notification, 0000000000000000 02:28:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:08 executing program 4: 02:28:08 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xffffff96) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x3f00000000000000}, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 520.253604] net_ratelimit: 24 callbacks suppressed [ 520.253624] protocol 88fb is buggy, dev hsr_slave_0 [ 520.265117] protocol 88fb is buggy, dev hsr_slave_1 [ 520.271935] protocol 88fb is buggy, dev hsr_slave_0 [ 520.278784] protocol 88fb is buggy, dev hsr_slave_1 02:28:08 executing program 0: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x1, 0xc000) [ 520.408858] binder: undelivered death notification, 0000000000000000 02:28:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 02:28:08 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[], 0x0, &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x800000088040, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="a7cffe593e99c00a8475c7cd3e2835bb", 0x10) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) 02:28:08 executing program 5: 02:28:08 executing program 0: [ 520.769768] binder: 16308:16311 ioctl c0306201 0 returned -14 [ 520.806985] binder: undelivered death notification, 0000000000000000 02:28:09 executing program 2: 02:28:09 executing program 5: 02:28:09 executing program 4: 02:28:09 executing program 0: 02:28:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 02:28:09 executing program 4: [ 521.298521] binder: 16324:16329 ioctl c0306201 0 returned -14 [ 521.323225] binder: undelivered death notification, 0000000000000000 [ 521.372574] protocol 88fb is buggy, dev hsr_slave_0 [ 521.378126] protocol 88fb is buggy, dev hsr_slave_1 [ 521.384238] protocol 88fb is buggy, dev hsr_slave_0 [ 521.389908] protocol 88fb is buggy, dev hsr_slave_1 [ 521.395853] protocol 88fb is buggy, dev hsr_slave_0 [ 521.401869] protocol 88fb is buggy, dev hsr_slave_1 02:28:09 executing program 1: 02:28:09 executing program 0: 02:28:09 executing program 5: 02:28:09 executing program 2: 02:28:09 executing program 4: 02:28:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 02:28:09 executing program 0: [ 521.619764] binder: 16338:16339 ioctl c0306201 0 returned -14 02:28:09 executing program 2: 02:28:09 executing program 1: [ 521.679781] binder: undelivered death notification, 0000000000000000 02:28:09 executing program 4: 02:28:09 executing program 5: 02:28:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0}) 02:28:10 executing program 1: 02:28:10 executing program 0: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00') 02:28:10 executing program 2: [ 522.078315] binder: undelivered death notification, 0000000000000000 02:28:10 executing program 5: 02:28:10 executing program 4: 02:28:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0}) 02:28:10 executing program 2: 02:28:10 executing program 5: 02:28:10 executing program 1: 02:28:10 executing program 4: [ 522.565099] binder: undelivered death notification, 0000000000000000 02:28:10 executing program 0: 02:28:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x0}) 02:28:10 executing program 1: 02:28:10 executing program 2: 02:28:10 executing program 4: 02:28:10 executing program 5: 02:28:11 executing program 0: [ 522.995746] binder: undelivered death notification, 0000000000000000 02:28:11 executing program 1: 02:28:11 executing program 4: 02:28:11 executing program 2: 02:28:11 executing program 5: 02:28:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x400000, 0x0}) 02:28:11 executing program 0: 02:28:11 executing program 2: 02:28:11 executing program 1: 02:28:11 executing program 4: [ 523.513472] binder: undelivered death notification, 0000000000000000 02:28:11 executing program 5: 02:28:11 executing program 0: 02:28:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x400000, 0x0}) 02:28:11 executing program 2: 02:28:11 executing program 4: 02:28:11 executing program 1: 02:28:12 executing program 0: 02:28:12 executing program 2: 02:28:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x400000, 0x0}) 02:28:12 executing program 5: 02:28:12 executing program 1: 02:28:12 executing program 4: 02:28:12 executing program 0: 02:28:12 executing program 2: 02:28:12 executing program 5: 02:28:12 executing program 3: 02:28:12 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x0, @rand_addr=0x8, 0x0, 0x0, 'lblcr\x00'}, {@remote, 0x4e23}}, 0x44) 02:28:12 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) 02:28:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap$perf(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) 02:28:12 executing program 2: clone(0x80000ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000001c0)=0x2, 0x8b, 0x2, 0x0, &(0x7f0000000280), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f00009b1ffc)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) 02:28:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x5, 0xa, 0x6293, 0xa, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) bind$packet(0xffffffffffffffff, 0x0, 0x0) 02:28:12 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 02:28:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x10a000d04) ftruncate(0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) 02:28:13 executing program 0: sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@flags={0x3, 0x110}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:28:13 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)=ANY=[@ANYBLOB="740e0000075e17eb4649"], 0x1}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x4, 0x9}, 0x3d5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 02:28:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x6, 0x280081) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r2 = accept(r0, 0x0, &(0x7f0000000040)) accept4$unix(r2, 0x0, &(0x7f0000000080), 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) open_by_handle_at(r0, &(0x7f0000000100)={0x3c, 0x7, "4bfe4d165c9e7fda3fa5d0b6137039a394d0588e390623497337387afb9bf1c995818227383fd42fa8d2f8791d90d4fa12e56cc5"}, 0x0) [ 525.180105] netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. 02:28:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4bfffff9, 0x10a000d04) [ 525.442803] netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. 02:28:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) [ 525.532641] net_ratelimit: 18 callbacks suppressed [ 525.532661] protocol 88fb is buggy, dev hsr_slave_0 [ 525.543447] protocol 88fb is buggy, dev hsr_slave_1 [ 525.549378] protocol 88fb is buggy, dev hsr_slave_0 [ 525.555118] protocol 88fb is buggy, dev hsr_slave_1 [ 525.561111] protocol 88fb is buggy, dev hsr_slave_0 [ 525.567210] protocol 88fb is buggy, dev hsr_slave_1 02:28:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(tnepres-generic)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) 02:28:13 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz\xden\x95\xf7.2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9ajj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000380), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x0, 0x3) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) [ 525.612658] protocol 88fb is buggy, dev hsr_slave_0 [ 525.618346] protocol 88fb is buggy, dev hsr_slave_1 02:28:13 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 525.693048] binder: 16495:16496 ioctl c0306201 0 returned -14 [ 525.729563] binder: 16496 RLIMIT_NICE not set [ 525.734312] binder: 16495:16496 ioctl c0306201 2000dfd0 returned -11 02:28:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[]) [ 525.793930] binder: 16495:16506 ioctl c0306201 0 returned -14 02:28:14 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840)='/dev/fuse\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42c00) [ 526.015156] netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. 02:28:14 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 02:28:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 02:28:14 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 02:28:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000240)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0\x00') chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x770, 0x0, 0x3, 0x8, 0x8, 0x3}, &(0x7f0000000280)=0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000107c) 02:28:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0xf6}}, {{&(0x7f0000007500)=@hci, 0x9a, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) [ 526.492830] protocol 88fb is buggy, dev hsr_slave_0 [ 526.498657] protocol 88fb is buggy, dev hsr_slave_1 02:28:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, @buffer={0xfff0004, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 526.645139] netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. 02:28:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0xff3d) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:28:14 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 02:28:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0xfffffdfd, 0x400000, 0x0}) 02:28:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000001000/0x1000)=nil, 0x20000000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) [ 527.162858] netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. [ 527.203190] binder: 16567:16568 Acquire 1 refcount change on invalid ref 0 ret -22 [ 527.248162] binder: 16567:16568 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 527.283387] binder: 16567:16568 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:28:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil) 02:28:15 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 02:28:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000000)=@ethtool_cmd={0xb}}) [ 527.947614] binder: 16567:16593 Acquire 1 refcount change on invalid ref 0 ret -22 [ 527.978497] binder: 16567:16593 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 527.998163] binder: 16567:16593 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 530.652589] net_ratelimit: 22 callbacks suppressed [ 530.657634] protocol 88fb is buggy, dev hsr_slave_0 [ 530.661633] protocol 88fb is buggy, dev hsr_slave_1 [ 530.661633] protocol 88fb is buggy, dev hsr_slave_0 [ 530.661633] protocol 88fb is buggy, dev hsr_slave_1 02:28:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) 02:28:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) rmdir(&(0x7f0000000080)='./control\x00') 02:28:18 executing program 5: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 02:28:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x1ffffd, 0x80000000000002e, 0x0, 0xffffffffffffffff}) dup2(r0, r1) 02:28:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 02:28:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00004ca000)={&(0x7f0000690000)=ANY=[@ANYBLOB="1400000000071fff000098ec000000000000fd00"], 0x14}}, 0x0) [ 530.949370] netlink: 5 bytes leftover after parsing attributes in process `syz-executor5'. [ 531.050965] ALSA: seq fatal error: cannot create timer (-22) [ 531.088754] ALSA: seq fatal error: cannot create timer (-22) 02:28:19 executing program 5: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 02:28:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000004c0)=""/145, 0x91) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000007020008006367726f7570320001000100f304f37368a2227bcff9a372ebe74f5efb817d9d91a79458b98e0fc17912011ee644b84d23ac478242005b111b42b60ecb11061bf40158fc"], 0x4d) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x0, 0x84) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)) memfd_create(&(0x7f0000000580)='eth0:\\ppp1\\vboxnet0vboxnet0vmnet1+trustedloGPL&{&vmnet1*posix_acl_access\'/securitycgroup\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:28:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') sendfile(r1, r2, 0x0, 0x7ffff000) 02:28:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x8, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 02:28:19 executing program 1: unshare(0x0) link(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0xf) sendfile(r2, r3, 0x0, 0x8000ffeffffe) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 02:28:19 executing program 4: r0 = inotify_init() read(r0, 0x0, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x0, r1}) r4 = dup2(r2, r3) dup2(r4, r0) tkill(r1, 0x1000000016) 02:28:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x13102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x200, 0x60}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 02:28:19 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) 02:28:19 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000000005011fe4ac141417e0", 0x11}], 0x1}, 0x0) [ 531.772678] protocol 88fb is buggy, dev hsr_slave_0 [ 531.778822] protocol 88fb is buggy, dev hsr_slave_1 [ 531.785331] protocol 88fb is buggy, dev hsr_slave_0 [ 531.791144] protocol 88fb is buggy, dev hsr_slave_1 [ 531.797313] protocol 88fb is buggy, dev hsr_slave_0 [ 531.803185] protocol 88fb is buggy, dev hsr_slave_1 02:28:19 executing program 0: mremap(&(0x7f0000001000/0x1000)=nil, 0x20000000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) [ 531.820594] ================================================================== [ 531.825920] BUG: KMSAN: uninit-value in arp_mc_map+0x6a0/0x9b0 [ 531.825920] CPU: 0 PID: 16648 Comm: syz-executor3 Not tainted 5.0.0-rc1+ #7 [ 531.825920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.825920] Call Trace: [ 531.825920] dump_stack+0x173/0x1d0 [ 531.825920] kmsan_report+0x12e/0x2a0 [ 531.857323] __msan_warning+0x82/0xf0 [ 531.863876] arp_mc_map+0x6a0/0x9b0 [ 531.863876] arp_constructor+0x422/0xa50 [ 531.863876] ? arp_key_eq+0xd0/0xd0 [ 531.863876] ___neigh_create+0xe19/0x2890 [ 531.863876] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 531.863876] __neigh_create+0xbd/0xd0 [ 531.863876] ip_finish_output2+0xa0f/0x1820 [ 531.863876] ? module_param_sysfs_setup+0xb3/0x560 [ 531.863876] ip_finish_output+0xd2b/0xfd0 [ 531.863876] ip_output+0x53f/0x610 [ 531.863876] ? ip_mc_finish_output+0x3b0/0x3b0 [ 531.910764] ? ip_finish_output+0xfd0/0xfd0 [ 531.910764] ip_local_out+0x164/0x1d0 [ 531.910764] iptunnel_xmit+0x8a7/0xde0 02:28:20 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 531.910764] ip_tunnel_xmit+0x35b9/0x3980 [ 531.910764] ipgre_xmit+0x1098/0x11c0 [ 531.910764] ? ipgre_close+0x230/0x230 [ 531.910764] dev_hard_start_xmit+0x604/0xc40 [ 531.910764] __dev_queue_xmit+0x2e48/0x3b80 [ 531.910764] dev_queue_xmit+0x4b/0x60 [ 531.910764] ? __netdev_pick_tx+0x1260/0x1260 [ 531.910764] packet_sendmsg+0x79bb/0x9760 [ 531.910764] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 531.910764] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 531.910764] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 531.910764] ___sys_sendmsg+0xdb9/0x11b0 [ 531.910764] ? compat_packet_setsockopt+0x360/0x360 [ 531.910764] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 531.910764] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 531.910764] ? __fget_light+0x6e1/0x750 [ 531.910764] __se_sys_sendmsg+0x305/0x460 [ 531.910764] __x64_sys_sendmsg+0x4a/0x70 [ 531.910764] do_syscall_64+0xbc/0xf0 [ 531.910764] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 531.910764] RIP: 0033:0x457ec9 02:28:20 executing program 0: gettid() socket$unix(0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@flags={0x3, 0x110}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 532.015905] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.015905] RSP: 002b:00007fbfbc4b5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.015905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 532.015905] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 532.015905] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 532.015905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbfbc4b66d4 [ 532.015905] R13: 00000000004c52f9 R14: 00000000004d8d58 R15: 00000000ffffffff [ 532.015905] [ 532.015905] Uninit was created at: [ 532.015905] No stack [ 532.015905] ================================================================== [ 532.015905] Disabling lock debugging due to kernel taint [ 532.015905] Kernel panic - not syncing: panic_on_warn set ... [ 532.015905] CPU: 0 PID: 16648 Comm: syz-executor3 Tainted: G B 5.0.0-rc1+ #7 [ 532.015905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.015905] Call Trace: [ 532.015905] dump_stack+0x173/0x1d0 [ 532.015905] panic+0x3d1/0xb01 [ 532.015905] kmsan_report+0x293/0x2a0 [ 532.015905] __msan_warning+0x82/0xf0 [ 532.015905] arp_mc_map+0x6a0/0x9b0 [ 532.015905] arp_constructor+0x422/0xa50 [ 532.015905] ? arp_key_eq+0xd0/0xd0 [ 532.015905] ___neigh_create+0xe19/0x2890 [ 532.015905] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 532.015905] __neigh_create+0xbd/0xd0 [ 532.015905] ip_finish_output2+0xa0f/0x1820 [ 532.015905] ? module_param_sysfs_setup+0xb3/0x560 [ 532.015905] ip_finish_output+0xd2b/0xfd0 [ 532.015905] ip_output+0x53f/0x610 [ 532.015905] ? ip_mc_finish_output+0x3b0/0x3b0 [ 532.015905] ? ip_finish_output+0xfd0/0xfd0 [ 532.015905] ip_local_out+0x164/0x1d0 [ 532.015905] iptunnel_xmit+0x8a7/0xde0 [ 532.015905] ip_tunnel_xmit+0x35b9/0x3980 [ 532.015905] ipgre_xmit+0x1098/0x11c0 [ 532.015905] ? ipgre_close+0x230/0x230 [ 532.015905] dev_hard_start_xmit+0x604/0xc40 [ 532.015905] __dev_queue_xmit+0x2e48/0x3b80 [ 532.015905] dev_queue_xmit+0x4b/0x60 [ 532.015905] ? __netdev_pick_tx+0x1260/0x1260 [ 532.015905] packet_sendmsg+0x79bb/0x9760 [ 532.015905] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 532.015905] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 532.015905] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 532.015905] ___sys_sendmsg+0xdb9/0x11b0 [ 532.015905] ? compat_packet_setsockopt+0x360/0x360 [ 532.015905] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 532.015905] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 532.015905] ? __fget_light+0x6e1/0x750 02:28:20 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020207031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x1}, 0x0) [ 532.015905] __se_sys_sendmsg+0x305/0x460 [ 532.015905] __x64_sys_sendmsg+0x4a/0x70 [ 532.015905] do_syscall_64+0xbc/0xf0 [ 532.015905] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 532.015905] RIP: 0033:0x457ec9 [ 532.015905] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.015905] RSP: 002b:00007fbfbc4b5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.015905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 532.015905] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 532.015905] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 532.015905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbfbc4b66d4 [ 532.015905] R13: 00000000004c52f9 R14: 00000000004d8d58 R15: 00000000ffffffff [ 532.015905] Kernel Offset: disabled [ 532.015905] Rebooting in 86400 seconds..