card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:24 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:25 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:25 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:25 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 3:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x0, 0x0, 0x3, 0xc4})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, 0x0, 0x0, 0x0)

22:08:27 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
flock(r1, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:27 executing program 3:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x0, 0x0, 0x3, 0xc4})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, 0x0, 0x0, 0x0)

22:08:27 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:27 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:28 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:28 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:28 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:28 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:28 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:28 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = fcntl$getown(r1, 0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:30 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:30 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:30 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:30 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x101000)
ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0xff, 0x0, 0x9, 0x200000000, 0x88, 0x70de})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
write$UHID_DESTROY(r2, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:30 executing program 3:
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00')
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2000203a, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$ppp(r0, &(0x7f0000000080)="00df7c551a36ed9a16a6668df9db6ec0d012da48173ddfba46b746a5cb515e1074bf463fb9e0b59f87314fd637b511c0012ace89f77ea35759072d67ba6f50113bfa630e903d955d03963bef38c339f9c3210569a3f8be3b5f359948479355f10b22e07d", 0x64)
read(r0, 0x0, 0xfe64)

22:08:30 executing program 3:
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

22:08:31 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)

22:08:31 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3ff)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040), 0x0)

22:08:31 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:31 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:31 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="61e4506baeb86f345e1831da27a549c5", 0x10)

22:08:32 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x3}, 0x10)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:32 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 4:
r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x4, 0x0, 0x7})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:32 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 3:
syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00430f58980e1000023e0f1110660f9f31d3196f")
clone(0x100000203, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a)
close(r0)
execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0)
write$P9_RLOPEN(r2, 0x0, 0x0)

22:08:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 1:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 0:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:33 executing program 1:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 0:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:33 executing program 0:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x62, 0x26f, 0x8, 0x2})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0xba73)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:34 executing program 1:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 0:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0))

22:08:34 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 2:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 0:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000000c0)={0x8, {{0x2, 0x4e1e, @empty}}, {{0x2, 0x4e23, @empty}}}, 0x108)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={<r4=>0x0, 0x200000}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r4, 0x1, 0xfffffffffffffffc}, &(0x7f00000004c0)=0xc)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000200))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:34 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:34 executing program 2:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

[ 1313.917236][T15314] QAT: Invalid ioctl
22:08:35 executing program 0:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

[ 1314.027506][T15319] QAT: Invalid ioctl
22:08:35 executing program 2:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x5000, 0x4, 0x100000001, 0x101, 0x0, [{0x2, 0x80000000, 0x101, [], 0x8}, {0x8, 0x6, 0x9, [], 0x100000001}, {0x7, 0x0, 0xb68, [], 0x6}, {0x0, 0x1, 0x2000, [], 0x7}, {0x3, 0x6, 0x7cf, [], 0x509}, {0x7, 0x5, 0x7, [], 0xadb6}, {0xf6, 0xfffffffffffff908, 0x6, [], 0x9}, {0x1000, 0x1, 0x424, [], 0x8}, {0x8, 0x4, 0xfffffffffffffe01, [], 0x6}, {0xf71, 0x10000, 0x4, [], 0x4f}, {0x3, 0xea, 0xd87, [], 0x1}, {0x38d4, 0x1b6c, 0xff, [], 0x75a1ee74}, {0xfffffffffffffffb, 0x1, 0x8, [], 0x81}, {0xe2, 0x4, 0x7e45e823}, {0x3, 0x100, 0x7ff, [], 0x1}, {0x0, 0x2, 0x8, [], 0x9}, {0x9, 0x7fff, 0x5, [], 0x80}, {0x6, 0x2a, 0x100, [], 0x100}, {0x7e, 0x6, 0xa9, [], 0x7}, {0x80, 0x4, 0x20, [], 0x3ff}, {0x98b, 0x7fffffff, 0x6, [], 0x757}, {0x9, 0x9, 0x6, [], 0x5}, {0x200, 0x7fff, 0x100000000000000, [], 0x7}, {0x6, 0x5, 0x8000, [], 0xf72}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:35 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:35 executing program 2:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000040), 0x4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x103fd, 0x0, 0x6000, 0x1000, &(0x7f0000005000/0x1000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, r0})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x680})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xe05b}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x10)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000140))

22:08:36 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 2:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 2:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:36 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:36 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f00000000c0)="ba4100b002eebaf80c66b88ae0cc8166efbafc0cb868ffef640fc79900000f01c866b9920a00000f3266b9800000c00f326635008000000f30b8c5008ee0f3ab0f01c8ea7ea38e00", 0x48}], 0x1, 0x0, 0x0, 0x1fe)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={<r3=>0x0}, &(0x7f0000000140)=0xffcd)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000180)=r3)
ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000001c0)=0x8)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:37 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:37 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:38 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:38 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0)
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)=0x8)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:39 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:39 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x2dc, 0x16, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], 0x1, 0x680})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

22:08:39 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x3, 0x6, "0c07b9322aa0"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:40 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x81, 0x40000)
ioctl$UI_DEV_CREATE(r2, 0x5501)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:40 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:40 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:41 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:41 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x10000, 0x1000})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:42 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x800, 0x0)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x141, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='syzkaller0\x00', 0x2, 0x1})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x7609, 0x0, 0x1, 0x0, 0x0, 0xae, 0x0, 0x0, 0x4f5], 0xfffffffffffffffc, 0x400680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:42 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:42 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

[ 1321.705266][T15713] *** Guest State ***
[ 1321.730388][T15713] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[ 1321.784311][T15713] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[ 1321.842614][T15713] CR3 = 0x0000000000000000
[ 1321.867319][T15713] RSP = 0x0000000000007609  RIP = 0xfffffffffffffffc
[ 1321.900793][T15713] RFLAGS=0x00400682         DR7 = 0x0000000000000400
[ 1321.925605][T15713] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
22:08:43 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:43 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:43 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

[ 1321.994953][T15713] CS:   sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[ 1322.053003][T15713] DS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1322.103934][T15713] SS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1322.138124][T15713] ES:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
22:08:43 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:43 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

[ 1322.149319][T15713] FS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1322.195289][T15713] GS:   sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 1322.272054][T15713] GDTR:                           limit=0x0000ffff, base=0x0000000000000000
[ 1322.324166][T15713] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
22:08:43 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

[ 1322.387666][T15713] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[ 1322.472882][T15713] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[ 1322.520937][T15713] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[ 1322.580123][T15713] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[ 1322.656633][T15713] Interruptibility = 00000000  ActivityState = 00000000
[ 1322.689170][T15713] *** Host State ***
[ 1322.709028][T15713] RIP = 0xffffffff811fa100  RSP = 0xffff88804f26f670
[ 1322.729202][T15713] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[ 1322.736325][T15713] FSBase=00007fbb1f326700 GSBase=ffff8880ae600000 TRBase=fffffe0000003000
[ 1322.769143][T15713] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[ 1322.775746][T15713] CR0=0000000080050033 CR3=0000000057a20000 CR4=00000000001426f0
[ 1322.783908][T15713] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360
[ 1322.798876][T15713] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[ 1322.805994][T15713] *** Control State ***
[ 1322.817940][T15713] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3
[ 1322.825667][T15713] EntryControls=0000d1ff ExitControls=002fefff
[ 1322.838277][T15713] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[ 1322.846291][T15713] VMEntry: intr_info=80000004 errcode=00000000 ilen=00000000
[ 1322.860396][T15713] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
22:08:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:44 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1322.867794][T15713]         reason=80000021 qualification=0000000000000000
[ 1322.881519][T15713] IDTVectoring: info=00000000 errcode=00000000
[ 1322.887766][T15713] TSC Offset = 0xfffffd3a51173eba
[ 1322.896206][T15713] TPR Threshold = 0x00
[ 1322.903746][T15713] EPT pointer = 0x00000000294cd01e
22:08:44 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 4:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0xc, 0x7, 0x100000000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4001)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:44 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:44 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
pipe2(&(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000b80))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:45 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:45 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x5, 0x9, 0x9, 0x80, 0x1f, 0xffff, 0x8000, 0x7, 0x100000000, 0x5a43, 0xffffffffffffffe1, 0x6, 0x2, 0x5b, 0xffffffffffffffff, 0x5}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:46 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x200000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:46 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:46 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x101ff, 0x0, &(0x7f0000ff9000/0x4000)=nil})
r2 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x100000001, 0x40)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000480))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = dup2(r1, r1)
write$P9_RUNLINKAT(r3, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000004c0)={0x3, 0xef48})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x80000)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x0, "6bd36f772f4dc83d32e95bd5bc002a3a4cd285b493afcbcb5401c0b570aa74106bcfd777a9ca5ba58527233eb83bf8757b1e91c7e48b54a53ce3a20588fc90cac4aad3c35142b6a00357370c136c0f5c"}, 0xd8)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

22:08:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x20000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={<r5=>0x0, 0x80000, r3})
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x9338984397ef5433, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000140)={r5, 0x80000, r6})

22:08:47 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:47 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:47 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:47 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101000, 0x0)
ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000100)=""/67)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

22:08:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:08:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x8081, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f00000002c0)="36afb807008ee8b813028ec0f3f2d1ef0f38ca97d3d866b9a208000066b8bcd6629466ba000000000f300f01cb3e0f01cf0f0f9d7de88e0fc72a"}], 0xaaaab8a, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=<r3=>0x0)
r4 = geteuid()
getgroups(0x5, &(0x7f0000000200)=[<r5=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01])
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={r3, r4, r5}, 0xc)
pipe(&(0x7f0000000300))
getrlimit(0x3, &(0x7f0000000100))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
pipe2(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
ioctl$DRM_IOCTL_RM_MAP(r7, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x5, 0x4, 0x9, &(0x7f000000a000/0x1000)=nil, 0x80000000})
r9 = fcntl$getown(r0, 0x9)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = getegid()
setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={r9, r10, r11}, 0xc)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

22:08:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:08:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:48 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:08:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:49 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:49 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x101001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:50 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:50 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x9f0000, 0x100, 0x3, [], &(0x7f0000000140)={0x98090d, 0x5, [], @p_u16=&(0x7f0000000100)=0x7}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r1, 0x80000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x680})
r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20000)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x30b)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:51 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
getitimer(0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00'}, 0x10)
ftruncate(r2, 0x1000000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8)
sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeefffdef)
close(r1)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000380)={0x1, 0x8, 0x0, 0x101})
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x38)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x0, 0x4, 0x0, r4}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x1000000}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000180)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000000400)=""/4096}, 0x48)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000100))
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, 0x0)

22:08:51 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:51 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:52 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 5:
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0)

22:08:52 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0x1, 0x2)

22:08:52 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e000000210081aee4050cecff0e00fa078b5bdb4cb8e178485e517f5eb1b843cb7bb9137e2ac47169972e6d758e", 0x2e}], 0x1}, 0x0)

22:08:52 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
sendfile(r1, r2, 0x0, 0x2000006)

22:08:53 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000440)='.', 0x0, 0x5010, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x12)
mount(&(0x7f0000000080), &(0x7f0000000040)='.', 0x0, 0x5010, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)

22:08:53 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:53 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:53 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:53 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:53 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:54 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:54 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:54 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:54 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:54 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:54 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:54 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:54 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:54 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:54 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0)
ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x2, 0x0, @pic={0xffff, 0x246, 0xbec, 0xfffffffffffffffb, 0x2, 0x7, 0x400, 0x4, 0x5, 0x6, 0x100000000, 0x9, 0x8001, 0x8000, 0x5, 0x7}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x90, 0x80000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
prctl$PR_GET_NO_NEW_PRIVS(0x27)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={<r4=>0x0, @initdev}, &(0x7f00000001c0)=0xc)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in=@broadcast, @in=@remote, 0x4e21, 0x1000, 0x4e22, 0x0, 0xa, 0xa0, 0x20, 0x23, r4, r5}, {0xa589, 0xfffffffffffffc01, 0x80, 0x2, 0x40, 0x7, 0x0, 0x6}, {0x9, 0xebe, 0x47fc, 0x7}, 0xfffffffffffff800, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x7f}, 0x0, @in6=@rand_addr="58f24f7505b8a3506f800527de539427", 0x0, 0x1, 0x0, 0x0, 0x401, 0x4, 0x8000}}, 0xe8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x8900)
ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f00000000c0)={0xfffffffffffffff7, 0x0, 0x6, 0x1f})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

22:08:55 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:55 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1f, 0x4000)
sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x3, 0x4, {0xa, 0x4e23, 0x80000001, @ipv4={[], [], @multicast1}, 0x7}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="77eb1a8266124da5b90eac41d6cbb70026d27ba8bce33428cbb8f8cc34b96dc420c59ee31c6beab083dd11a631bcb10d070f6b89f4f19f597077869704629051a57fb3045631098666e2f4edb655f701079959e3544dac88e0af07ae5bd9b8fdd500ad53bc764b1d2c0f05193ab4288c9e64a77d68ef091981fceca895cc6d2da041a6deee1b39083c51692b7447bc12f5e5840cfc82586eb7f3b0d5ddc6b2f21472c56507907dd98d8286b47bc83a600ce0d9eaa738371ea2700293141500209da1f256f49cadf377c7513da13063c27160b382941cb3eb64aac5866e0e8d63348bbfb0cb2ce7cd4aa63d52baf5b7a4651e7fb547", 0xf5}, {&(0x7f0000000440)="b0dce1efa235af2f4821784d93f0aec4815ab1f4b045a21a0084d59a1df0e8d477e948b7470d5ac92aa4011776c3b34bfaa229d9f606ced4a831b65156a24f815f90f3a2", 0x44}, {&(0x7f0000001640)="396f7ac3315b44de809e78dc06aa474eb3789757073f38cb598dc34a02251c62b9b8ecfa39b9b71c7e649edb0bbde0ce0fc532076198b5df5da5050fc888af699b5ac3596ece0359356b3c7b60a794d13a796a39", 0x54}, {&(0x7f0000000240)="f312a1", 0x3}, {&(0x7f00000016c0)="237304978b1fff52815d1cb294b3eb452ca05a2306f33c484487ea403b8c15bfdcade126229bfafe022f13f9b2e9961026143c6d186a575d1009bbbfd63fdca9e260dc796d1acd79530acdbbab606ef64042649914c950ed08d6bd40d25c411e8b939dd846f14aa7149d6c6f7032d8ebe5482720a734d410c56138aabace4a19130e4f9c5edb26ac736eee7fbcd98390b85a07d5c4054f9a614e633993212dc386ed5804b354e37b744666041f58c5f4c9c68f0ecad7018a5a2d3be86e8e357aec473cc59f931abe198dde8468390520cedc1c888c3495b71deedfe7375c6b0fc42aa5efd4631623cc82", 0xea}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="378284da50ee9caf0c2a4af0c6a2f3622f09ad4db966c1dac4b8058a9eecc3888dadddabb0a76e44ab8db56c1e353ad72d8eddd75731a2aee27968869d8d7e3a73cbaf9e48b762f22f1e14b56003d07d447316de9e6df228d6bb5566e18fa7221c9855ee752338", 0x67}, {&(0x7f0000002840)="3117fee4fe648352afb33f2d7668cbf75bb87f3f6309d130a43b9b949a601bfca1642518e0bdbdf09e0a6e53f4d7ba749c772f24ab5f2943e169e03eb5cbdea3967d5024db8376115a925ba75509091e9a5b5941e442628bad4af2f5e4ce39cb94d6cc4b4694d571e9b190e1b88f405374999c4065298e086580633b4ac0e66384635efb3098a169dfe7cb4ae904fcb84a848ab5c892d2d32c3ed0d021e4c2480da33addfa5fc5c13943dfafa46b3ee541cdc27e48095b5873533237d079", 0xbe}], 0x9}, 0x4001)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80, 0x100)
accept4(r4, &(0x7f00000000c0)=@caif=@dgm, &(0x7f0000000140)=0x80, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, r2, 0x0, 0x11, &(0x7f0000000340)=']uservmnet0nodev\x00', 0xffffffffffffffff}, 0x30)
setpriority(0x0, r5, 0x80)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000300)={@local, r6}, 0x14)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000002a00)=r4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:55 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:55 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:55 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:56 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:56 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:56 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:56 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:56 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:56 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:56 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:57 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:57 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x1c4000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:57 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:57 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:57 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:57 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:57 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:57 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:57 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0xf440, 0xb99e})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:58 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:58 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:58 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:58 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:58 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:58 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:58 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:08:58 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:58 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, 0x0)
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:58 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:08:58 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:08:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0xf000, 0x1, 0x1000, 0x4], 0x2, 0x40, 0x5})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r4, 0x80000)
syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x8, 0x40000)
sendto$inet(r2, &(0x7f0000000540)="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", 0x1000, 0x20000884, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:08:59 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:59 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, 0x0)
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:59 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:59 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:08:59 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:59 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:59 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:08:59 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, 0x0)
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:59 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:08:59 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:08:59 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:08:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7, 0x3, 0x6, 0xfff})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:08:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
getitimer(0x0, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={0x0}, 0x10)
ftruncate(r2, 0x1000000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8)
sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeefffdef)
close(r1)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000380)={0x1, 0x8, 0x0, 0x101})
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@dev, 0x1, @default, @netrom={'nr'}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]})
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080))
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x38)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r4}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x1000000}, [@map={0x18, 0x0, 0x1, 0x0, r5}, @map={0x18, 0x0, 0x1, 0x0, r4}]}, 0x0, 0x80000001, 0x1000, &(0x7f0000000400)=""/4096}, 0x48)
ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000100)=0x101)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000200)={0x749, 0x1, 0x0, 0x42, 0x400, 0x1, 0xc})

22:09:00 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x80000003)

22:09:00 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(0x0, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:00 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(0x0, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:00 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, 0x0, 0x80000003)

22:09:00 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:00 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x80000003)

22:09:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={<r3=>0x0, 0x8}, &(0x7f0000000100)=0x8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xa1e, 0x9, 0x7, 0xc9, 0x2, 0x80000001, 0x40, 0xc82a, 0x1ff, 0x0, 0x3ff, 0x0, 0xdd81, 0x3ff, 0x6, 0x58048], 0x10000, 0x2000})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r3, 0x3}, &(0x7f0000000180)=0xc)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

22:09:00 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(0x0, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:00 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:09:00 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000), &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:00 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x80000003)

22:09:01 executing program 2:
r0 = socket(0x400000000000010, 0x2002400000002, 0x0)
write(r0, &(0x7f0000000000)="200000001e000b59eb8fae3e09fffd0000005037d78367f18000080000000000", 0x20)

22:09:01 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:01 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000), &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:01 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:09:01 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

[ 1339.797841][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'.
22:09:01 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:01 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000), &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:01 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0)

22:09:01 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:09:01 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000040)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "748ddcc0c89116105829576914e70bfed06d00807497644ab8a700"})

22:09:01 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:01 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:01 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:01 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:01 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)
read(r0, &(0x7f0000000140)=""/165, 0x1000000eb)

22:09:01 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:01 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:01 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KDDELIO(r1, 0x4b35, 0x0)
bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff}}, 0xa)

[ 1340.444872][T16749] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
22:09:01 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:01 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r0, 0x7001)

22:09:02 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, 0x0, 0x80000003)

22:09:02 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, 0x0)
sendfile(r1, r2, 0x0, 0x8000)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000140)=""/88)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@local}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)

22:09:02 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0x0, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:02 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:02 executing program 0:
socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea)
splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0)

[ 1340.900069][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1340.906665][    C0] protocol 88fb is buggy, dev hsr_slave_1
22:09:02 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0x0, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:02 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, 0x0, 0x80000003)

22:09:02 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:02 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0x0, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:02 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, 0x0, 0x80000003)

22:09:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:02 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:02 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, 0x0)
sendfile(r1, r2, 0x0, 0x8000)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000140)=""/88)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@local}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)

22:09:02 executing program 3:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1341.699045][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1341.704877][    C0] protocol 88fb is buggy, dev hsr_slave_1
22:09:03 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x0)

[ 1341.779482][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1341.785899][    C1] protocol 88fb is buggy, dev hsr_slave_1
22:09:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:03 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r2, &(0x7f0000000140)=0x4bfffffd, 0x10a000d04)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))

22:09:03 executing program 3:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:03 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x5}, 0x8)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")

22:09:03 executing program 0:
epoll_create1(0x0)
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

22:09:03 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x0)

22:09:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:03 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82, 0x0)
io_setup(0x11, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="10000000f0ffffffff00000000855da0", 0x10}])

22:09:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0)

22:09:03 executing program 3:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:03 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x0)

22:09:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x30}}, 0x40000)

22:09:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0)

[ 1342.750382][T16884] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0
[ 1342.801357][T16884] bond0: lo is up - this may be due to an out of date ifenslave
22:09:04 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1342.855005][T16884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
22:09:04 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0)

22:09:04 executing program 2:
pause()
syz_open_procfs(0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0xa, @in6, 0x0, 0x1, 0x0, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0)

22:09:04 executing program 0:
epoll_create1(0x0)
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

22:09:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="08000700ac141400"], 0x1}}, 0x0)

22:09:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r2 = accept(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x4)
sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)='R', 0x1}], 0x1}, 0x0)

22:09:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:04 executing program 5:
epoll_create1(0x0)
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

22:09:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
fchdir(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

22:09:04 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:05 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:05 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00'})
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="793460f41c77ab19f341e9206ce12fa4f3f2ba2f8d3a4d8c924982aee052f6b78ab51fc5e9ba2532ac557b743cacd4ed11335c78e31ac9a7d38a56a46a79bb9afe3d275855b6771a920a0b23c2c73b8f70911d72bf1f9124dfce2c11fd40f7cb96b2c4eaab44c13bde0e0c0bb22133e74d32256c239264c2091b3823487d691c0d7eb22a33472749018b6b1e08583dd00ad19e6c1768aebb4a14656298d070d8909a5005038d10f6d43ce6534f1f657f7b8832413b8e34609a8f34677866f4c9b252c2642ea912", 0xc7}], 0x1)
getegid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2f7)
r1 = socket$netlink(0x10, 0x3, 0xf)
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
r4 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2)
pwritev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f", 0xf}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r2, r3, 0x0, 0x2000006)

22:09:05 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00'})
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:05 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
write$cgroup_int(r1, &(0x7f0000000980), 0x100000321)
tkill(r0, 0x1004000000016)

22:09:05 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:05 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0x4)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
fcntl$setstatus(r2, 0x4, 0x42803)

22:09:05 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x6)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c)

22:09:05 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00'})
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000003c0), 0x0}, 0x20)

22:09:06 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0xa00000000000000, 0x0, @empty={[0x0, 0x9000900]}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98)

22:09:06 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:06 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:06 executing program 0:

22:09:06 executing program 0:

22:09:06 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:06 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:06 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150004001d001fc41180b598bc593ab6821148a730de33240068c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/134, 0x86}], 0x3}}], 0x1, 0x0, 0x0)

[ 1345.330486][T17056] netlink: 'syz-executor1': attribute type 29 has an invalid length.
[ 1345.372845][T17056] netlink: 'syz-executor1': attribute type 29 has an invalid length.
[ 1345.442733][T17062] netlink: 'syz-executor1': attribute type 29 has an invalid length.
[ 1345.486956][T17056] netlink: 'syz-executor1': attribute type 29 has an invalid length.
[ 1345.507872][T17056] netlink: 'syz-executor1': attribute type 29 has an invalid length.
[ 1345.533371][T17062] netlink: 'syz-executor1': attribute type 29 has an invalid length.
22:09:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:08 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/11, 0xdd)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0))
r3 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x16)

22:09:08 executing program 5:

22:09:08 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:08 executing program 2:
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:08 executing program 1:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
ptrace(0x10, r0)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
pause()
ptrace$setregs(0x10, r0, 0x0, 0x0)

22:09:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:09 executing program 5:

22:09:09 executing program 0:

22:09:09 executing program 5:

22:09:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:09 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:09 executing program 0:

22:09:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:09 executing program 5:

22:09:09 executing program 0:

22:09:09 executing program 2:

22:09:09 executing program 1:

22:09:09 executing program 5:

22:09:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:09 executing program 0:

22:09:09 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:09 executing program 2:

22:09:09 executing program 0:

22:09:09 executing program 5:

22:09:09 executing program 2:

22:09:09 executing program 0:

22:09:09 executing program 1:

22:09:10 executing program 2:

22:09:10 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:10 executing program 5:

22:09:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:10 executing program 2:

22:09:10 executing program 0:

22:09:10 executing program 1:

22:09:10 executing program 5:

22:09:10 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:10 executing program 0:

22:09:10 executing program 2:

22:09:10 executing program 1:

22:09:10 executing program 5:

22:09:10 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:10 executing program 0:

22:09:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:10 executing program 2:

22:09:10 executing program 5:

22:09:10 executing program 1:

22:09:10 executing program 0:

22:09:10 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:10 executing program 1:

22:09:10 executing program 2:

22:09:10 executing program 5:

22:09:10 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:10 executing program 0:

22:09:11 executing program 1:
r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000000)=""/117, 0x75)

22:09:11 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r0 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:11 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r1, r2, 0x0, 0x8000)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0)
getuid()
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)

22:09:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="26a2f26be54091ca6f1a5f3ab403a07ff94e8fb355af9854d742f58392158e267f589604ea", 0x25}, {0x0}], 0x2)
getegid()
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2f7)
r1 = socket$netlink(0x10, 0x3, 0xf)
r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r2, r3, 0x0, 0x2000006)

22:09:11 executing program 0:
syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00430f58980e1000023e0f1110660f9f31d3196f")
clone(0x100000203, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a)
close(r0)
execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
write$P9_RLOPEN(r2, 0x0, 0x0)

22:09:11 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 1:
clone(0x13102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x29, 0x141})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[ 1350.019046][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1350.024929][    C0] protocol 88fb is buggy, dev hsr_slave_1
22:09:11 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 2:
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1350.099092][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1350.104951][    C1] protocol 88fb is buggy, dev hsr_slave_1
22:09:11 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r0 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:11 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x0)

22:09:11 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r0 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:11 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, 0x0)
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:11 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:11 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x9f0000, 0x100, 0x3, [], &(0x7f0000000140)={0x98090d, 0x5, [], @p_u16=&(0x7f0000000100)=0x7}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r1, 0x80000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x680})
r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20000)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x30b)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

22:09:12 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:12 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:12 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:13 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:13 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000040), 0x4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x103fd, 0x0, 0x6000, 0x1000, &(0x7f0000005000/0x1000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, r0})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x680})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xe05b}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x10)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000140))

22:09:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0))

22:09:14 executing program 5:
syz_open_dev$dri(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:14 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000040), 0x4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x103fd, 0x0, 0x6000, 0x1000, &(0x7f0000005000/0x1000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x7, r0})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x680})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xe05b}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x10)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000140))

22:09:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:14 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:14 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:14 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:14 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:14 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:14 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:14 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0))

22:09:15 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400000, 0x0)
execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='){]&selfproc&vboxnet1\x00', &(0x7f0000000200)='$security\x00', &(0x7f0000000240)='/dev/zero\x00', &(0x7f0000000440)='*vboxnet1vmnet0\x00', &(0x7f0000000480)='vmnet1selinux-\\vmnet1em0eth0lo\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000540)='/dev/kvm\x00'], &(0x7f0000000740)=[&(0x7f00000005c0)='/dev/zero\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='()\x00', &(0x7f0000000680)='cpuset%\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='/dev/kvm\x00'], 0x1800)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$TIOCSBRK(r0, 0x5427)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0)
ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f00000000c0)={0x2, 0x0, 0x9, 0x2, 0x73, 0x4338})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000780)=0x3)

22:09:15 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:15 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:15 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:15 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:16 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x0, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0x680})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0))

22:09:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400000, 0x0)
execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='){]&selfproc&vboxnet1\x00', &(0x7f0000000200)='$security\x00', &(0x7f0000000240)='/dev/zero\x00', &(0x7f0000000440)='*vboxnet1vmnet0\x00', &(0x7f0000000480)='vmnet1selinux-\\vmnet1em0eth0lo\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000540)='/dev/kvm\x00'], &(0x7f0000000740)=[&(0x7f00000005c0)='/dev/zero\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='()\x00', &(0x7f0000000680)='cpuset%\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='/dev/kvm\x00'], 0x1800)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$TIOCSBRK(r0, 0x5427)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0)
ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f00000000c0)={0x2, 0x0, 0x9, 0x2, 0x73, 0x4338})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000780)=0x3)

22:09:16 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x0, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:16 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:16 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x0, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:16 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400000, 0x0)
execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='){]&selfproc&vboxnet1\x00', &(0x7f0000000200)='$security\x00', &(0x7f0000000240)='/dev/zero\x00', &(0x7f0000000440)='*vboxnet1vmnet0\x00', &(0x7f0000000480)='vmnet1selinux-\\vmnet1em0eth0lo\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000540)='/dev/kvm\x00'], &(0x7f0000000740)=[&(0x7f00000005c0)='/dev/zero\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='()\x00', &(0x7f0000000680)='cpuset%\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='/dev/kvm\x00'], 0x1800)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x7, [], 0x5}, {0x9, 0x2, 0x9, [], 0xfd1c}, {0x2}, {}, {0xd9e}, {0xe2}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$TIOCSBRK(r0, 0x5427)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0)
ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f00000000c0)={0x2, 0x0, 0x9, 0x2, 0x73, 0x4338})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000780)=0x3)

22:09:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:17 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:17 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:18 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c12")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:18 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:18 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c12")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:19 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c12")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:19 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:19 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:20 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:20 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:20 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:21 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:21 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:22 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:22 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:23 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x0, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:23 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x0, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x0, 0x4000000000080002, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:24 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:24 executing program 1:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
syslog(0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
getitimer(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:24 executing program 2 (fault-call:3 fault-nth:0):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

[ 1363.636427][T17776] FAULT_INJECTION: forcing a failure.
[ 1363.636427][T17776] name failslab, interval 1, probability 0, space 0, times 0
22:09:24 executing program 0 (fault-call:22 fault-nth:0):
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1363.722282][T17776] CPU: 0 PID: 17776 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1363.731338][T17776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1363.741417][T17776] Call Trace:
[ 1363.744734][T17776]  dump_stack+0x1db/0x2d0
[ 1363.749082][T17776]  ? dump_stack_print_info.cold+0x20/0x20
[ 1363.754834][T17776]  should_fail.cold+0xa/0x14
[ 1363.759428][T17776]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1363.765265][T17776]  ? ___might_sleep+0x1e7/0x310
[ 1363.770121][T17776]  ? arch_local_save_flags+0x50/0x50
[ 1363.770148][T17776]  __should_failslab+0x121/0x190
[ 1363.770170][T17776]  should_failslab+0x9/0x14
[ 1363.784867][T17776]  kmem_cache_alloc+0x2be/0x710
[ 1363.789747][T17776]  ? kasan_check_write+0x14/0x20
[ 1363.794695][T17776]  prepare_creds+0xa4/0x510
[ 1363.799207][T17776]  ? abort_creds+0x2c0/0x2c0
[ 1363.803808][T17776]  ? check_preemption_disabled+0x48/0x290
[ 1363.809627][T17776]  cap_task_prctl+0x87a/0xb70
[ 1363.809679][T17776]  security_task_prctl+0x7d/0x100
[ 1363.819422][T17776]  __x64_sys_prctl+0x148/0xfb0
[ 1363.824196][T17776]  ? __ia32_sys_umask+0xb0/0xb0
[ 1363.829050][T17776]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1363.834525][T17776]  do_syscall_64+0x1a3/0x800
[ 1363.839122][T17776]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1363.844776][T17776]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1363.850507][T17776]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1363.856085][T17776]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1363.861994][T17776] RIP: 0033:0x458099
[ 1363.865895][T17776] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1363.885504][T17776] RSP: 002b:00007f213c9f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 1363.893923][T17776] RAX: ffffffffffffffda RBX: 00007f213c9f8c90 RCX: 0000000000458099
[ 1363.901896][T17776] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002f
[ 1363.909877][T17776] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
22:09:25 executing program 1 (fault-call:22 fault-nth:0):
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

[ 1363.917857][T17776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f213c9f96d4
[ 1363.925829][T17776] R13: 00000000004c46ef R14: 00000000004d7ca8 R15: 0000000000000005
22:09:25 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

22:09:25 executing program 5 (fault-call:22 fault-nth:0):
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

22:09:25 executing program 2 (fault-call:3 fault-nth:1):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

[ 1364.163740][T17785] FAULT_INJECTION: forcing a failure.
[ 1364.163740][T17785] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.236472][T17785] CPU: 0 PID: 17785 Comm: syz-executor1 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1364.245538][T17785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1364.255621][T17785] Call Trace:
[ 1364.258943][T17785]  dump_stack+0x1db/0x2d0
[ 1364.263290][T17785]  ? dump_stack_print_info.cold+0x20/0x20
[ 1364.269035][T17785]  ? should_fail+0x5c5/0xd13
[ 1364.273666][T17785]  should_fail.cold+0xa/0x14
[ 1364.278272][T17785]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1364.284089][T17785]  ? ___might_sleep+0x1e7/0x310
[ 1364.288954][T17785]  ? arch_local_save_flags+0x50/0x50
[ 1364.294266][T17785]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1364.300518][T17785]  __should_failslab+0x121/0x190
[ 1364.305466][T17785]  should_failslab+0x9/0x14
[ 1364.309976][T17785]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1364.315371][T17785]  alloc_pipe_info+0x152/0x580
[ 1364.318084][T17797] FAULT_INJECTION: forcing a failure.
[ 1364.318084][T17797] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.320146][T17785]  ? pipe_read+0x940/0x940
[ 1364.320162][T17785]  ? aa_path_link+0x5d0/0x5d0
[ 1364.320182][T17785]  ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1364.320196][T17785]  ? common_file_perm+0x293/0x820
[ 1364.320226][T17785]  splice_direct_to_actor+0x795/0x9d0
[ 1364.337322][T17796] FAULT_INJECTION: forcing a failure.
[ 1364.337322][T17796] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.341869][T17785]  ? ksys_dup3+0x660/0x660
[ 1364.341885][T17785]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 1364.341913][T17785]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1364.341936][T17785]  ? do_splice_to+0x190/0x190
[ 1364.391398][T17785]  ? rw_verify_area+0x118/0x360
[ 1364.396253][T17785]  do_splice_direct+0x2c7/0x420
[ 1364.401109][T17785]  ? splice_direct_to_actor+0x9d0/0x9d0
[ 1364.406668][T17785]  ? rw_verify_area+0x118/0x360
[ 1364.411526][T17785]  do_sendfile+0x61a/0xe60
[ 1364.415986][T17785]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 1364.421289][T17785]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1364.427530][T17785]  ? _copy_from_user+0xdd/0x150
[ 1364.432387][T17785]  __x64_sys_sendfile64+0x15a/0x240
[ 1364.437592][T17785]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[ 1364.442886][T17785]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1364.448358][T17785]  do_syscall_64+0x1a3/0x800
[ 1364.452951][T17785]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1364.458584][T17785]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1364.464322][T17785]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1364.469881][T17785]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1364.475782][T17785] RIP: 0033:0x458099
[ 1364.479686][T17785] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1364.499300][T17785] RSP: 002b:00007fef7e3a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1364.507723][T17785] RAX: ffffffffffffffda RBX: 00007fef7e3a3c90 RCX: 0000000000458099
[ 1364.515692][T17785] RDX: 0000000020000080 RSI: 0000000000000008 RDI: 0000000000000006
[ 1364.523663][T17785] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1364.531640][T17785] R10: 0000000080000003 R11: 0000000000000246 R12: 00007fef7e3a46d4
[ 1364.539622][T17785] R13: 00000000004c4f73 R14: 00000000004d8a28 R15: 0000000000000009
[ 1364.547627][T17796] CPU: 1 PID: 17796 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1364.556681][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1364.566746][T17796] Call Trace:
[ 1364.570044][T17796]  dump_stack+0x1db/0x2d0
[ 1364.574400][T17796]  ? dump_stack_print_info.cold+0x20/0x20
[ 1364.580144][T17796]  ? aa_file_perm+0x46a/0x1180
22:09:25 executing program 1 (fault-call:22 fault-nth:1):
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

[ 1364.584924][T17796]  should_fail.cold+0xa/0x14
[ 1364.589540][T17796]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1364.595358][T17796]  ? ___might_sleep+0x1e7/0x310
[ 1364.600213][T17796]  ? arch_local_save_flags+0x50/0x50
[ 1364.605522][T17796]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1364.611771][T17796]  __should_failslab+0x121/0x190
[ 1364.616719][T17796]  should_failslab+0x9/0x14
[ 1364.621223][T17796]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1364.626610][T17796]  alloc_pipe_info+0x152/0x580
[ 1364.631395][T17796]  ? pipe_read+0x940/0x940
[ 1364.635826][T17796]  ? aa_path_link+0x5d0/0x5d0
[ 1364.640509][T17796]  ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1364.646144][T17796]  ? common_file_perm+0x293/0x820
[ 1364.651185][T17796]  splice_direct_to_actor+0x795/0x9d0
[ 1364.656558][T17796]  ? ksys_dup3+0x660/0x660
[ 1364.660972][T17796]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 1364.666525][T17796]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1364.672767][T17796]  ? do_splice_to+0x190/0x190
[ 1364.677452][T17796]  ? rw_verify_area+0x118/0x360
[ 1364.682309][T17796]  do_splice_direct+0x2c7/0x420
[ 1364.687162][T17796]  ? splice_direct_to_actor+0x9d0/0x9d0
[ 1364.692716][T17796]  ? rw_verify_area+0x118/0x360
[ 1364.697567][T17796]  do_sendfile+0x61a/0xe60
[ 1364.702026][T17796]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 1364.707337][T17796]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1364.713604][T17796]  ? _copy_from_user+0xdd/0x150
[ 1364.713666][T17796]  __x64_sys_sendfile64+0x15a/0x240
[ 1364.713684][T17796]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[ 1364.713705][T17796]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1364.734460][T17796]  do_syscall_64+0x1a3/0x800
[ 1364.739070][T17796]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1364.744741][T17796]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1364.750479][T17796]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1364.756042][T17796]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1364.761967][T17796] RIP: 0033:0x458099
[ 1364.765861][T17796] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1364.785464][T17796] RSP: 002b:00007fb1b5bc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1364.786730][T17799] FAULT_INJECTION: forcing a failure.
[ 1364.786730][T17799] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.793870][T17796] RAX: ffffffffffffffda RBX: 00007fb1b5bc4c90 RCX: 0000000000458099
[ 1364.793880][T17796] RDX: 0000000020000080 RSI: 0000000000000005 RDI: 0000000000000004
[ 1364.793889][T17796] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 1364.793899][T17796] R10: 0000000080000003 R11: 0000000000000246 R12: 00007fb1b5bc56d4
22:09:26 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1364.793908][T17796] R13: 00000000004c4f73 R14: 00000000004d8a28 R15: 0000000000000006
[ 1364.821650][T17797] CPU: 1 PID: 17797 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1364.830695][T17797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1364.830701][T17797] Call Trace:
[ 1364.830721][T17797]  dump_stack+0x1db/0x2d0
[ 1364.830773][T17797]  ? dump_stack_print_info.cold+0x20/0x20
[ 1364.830793][T17797]  ? prepare_creds+0xa4/0x510
[ 1364.865794][T17797]  ? cap_task_prctl+0x87a/0xb70
[ 1364.865811][T17797]  ? security_task_prctl+0x7d/0x100
[ 1364.865826][T17797]  ? __x64_sys_prctl+0x148/0xfb0
[ 1364.865841][T17797]  ? do_syscall_64+0x1a3/0x800
[ 1364.865865][T17797]  should_fail.cold+0xa/0x14
[ 1364.908072][T17797]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1364.913900][T17797]  ? ___might_sleep+0x1e7/0x310
[ 1364.918751][T17797]  ? arch_local_save_flags+0x50/0x50
[ 1364.924041][T17797]  ? check_preemption_disabled+0x48/0x290
[ 1364.929769][T17797]  __should_failslab+0x121/0x190
[ 1364.934711][T17797]  should_failslab+0x9/0x14
[ 1364.939210][T17797]  __kmalloc+0x2dc/0x740
[ 1364.943467][T17797]  ? refcount_dec_and_mutex_lock+0x90/0x90
[ 1364.949298][T17797]  ? prepare_creds+0xa4/0x510
[ 1364.953975][T17797]  ? prepare_creds+0xa4/0x510
[ 1364.958661][T17797]  ? security_prepare_creds+0x123/0x190
[ 1364.964230][T17797]  security_prepare_creds+0x123/0x190
[ 1364.969610][T17797]  prepare_creds+0x3c4/0x510
[ 1364.974214][T17797]  ? abort_creds+0x2c0/0x2c0
[ 1364.978966][T17797]  ? check_preemption_disabled+0x48/0x290
[ 1364.984711][T17797]  cap_task_prctl+0x87a/0xb70
[ 1364.989402][T17797]  security_task_prctl+0x7d/0x100
[ 1364.994446][T17797]  __x64_sys_prctl+0x148/0xfb0
[ 1364.999302][T17797]  ? __ia32_sys_umask+0xb0/0xb0
[ 1365.004160][T17797]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1365.009639][T17797]  do_syscall_64+0x1a3/0x800
[ 1365.014235][T17797]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1365.019870][T17797]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1365.025598][T17797]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1365.031190][T17797]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1365.037091][T17797] RIP: 0033:0x458099
[ 1365.040995][T17797] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1365.060634][T17797] RSP: 002b:00007f213c9f8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 1365.069048][T17797] RAX: ffffffffffffffda RBX: 00007f213c9f8c90 RCX: 0000000000458099
[ 1365.077040][T17797] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002f
[ 1365.085026][T17797] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1365.092993][T17797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f213c9f96d4
[ 1365.100987][T17797] R13: 00000000004c46ef R14: 00000000004d7ca8 R15: 0000000000000005
[ 1365.115283][T17799] CPU: 0 PID: 17799 Comm: syz-executor1 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1365.124317][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1365.134373][T17799] Call Trace:
[ 1365.137673][T17799]  dump_stack+0x1db/0x2d0
[ 1365.142016][T17799]  ? dump_stack_print_info.cold+0x20/0x20
[ 1365.147738][T17799]  ? percpu_ref_put_many+0x129/0x270
[ 1365.153029][T17799]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1365.159282][T17799]  should_fail.cold+0xa/0x14
[ 1365.163883][T17799]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1365.169713][T17799]  ? ___might_sleep+0x1e7/0x310
[ 1365.174590][T17799]  ? arch_local_save_flags+0x50/0x50
[ 1365.179906][T17799]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1365.186168][T17799]  __should_failslab+0x121/0x190
[ 1365.191120][T17799]  should_failslab+0x9/0x14
[ 1365.195665][T17799]  __kmalloc+0x2dc/0x740
[ 1365.199913][T17799]  ? kmem_cache_alloc_trace+0x354/0x760
[ 1365.205467][T17799]  ? alloc_pipe_info+0x286/0x580
[ 1365.210419][T17799]  alloc_pipe_info+0x286/0x580
[ 1365.215193][T17799]  ? pipe_read+0x940/0x940
[ 1365.219630][T17799]  ? aa_path_link+0x5d0/0x5d0
[ 1365.224349][T17799]  ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1365.229981][T17799]  ? common_file_perm+0x293/0x820
[ 1365.235033][T17799]  splice_direct_to_actor+0x795/0x9d0
[ 1365.240410][T17799]  ? ksys_dup3+0x660/0x660
[ 1365.244832][T17799]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 1365.250388][T17799]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1365.256637][T17799]  ? do_splice_to+0x190/0x190
[ 1365.261321][T17799]  ? rw_verify_area+0x118/0x360
[ 1365.266183][T17799]  do_splice_direct+0x2c7/0x420
[ 1365.271043][T17799]  ? splice_direct_to_actor+0x9d0/0x9d0
[ 1365.276606][T17799]  ? rw_verify_area+0x118/0x360
[ 1365.281476][T17799]  do_sendfile+0x61a/0xe60
[ 1365.285918][T17799]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 1365.291212][T17799]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1365.297470][T17799]  ? _copy_from_user+0xdd/0x150
[ 1365.302339][T17799]  __x64_sys_sendfile64+0x15a/0x240
[ 1365.307544][T17799]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[ 1365.312830][T17799]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1365.318296][T17799]  do_syscall_64+0x1a3/0x800
[ 1365.322896][T17799]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1365.328549][T17799]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1365.334292][T17799]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1365.339885][T17799]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1365.345783][T17799] RIP: 0033:0x458099
[ 1365.349679][T17799] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1365.369279][T17799] RSP: 002b:00007fef7e3a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1365.377687][T17799] RAX: ffffffffffffffda RBX: 00007fef7e3a3c90 RCX: 0000000000458099
22:09:26 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080)=0x2, 0x80000003)

22:09:26 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080)=0x3, 0x80000003)

22:09:26 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

22:09:26 executing program 5 (fault-call:22 fault-nth:1):
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r0, r1, &(0x7f0000000080), 0x80000003)

[ 1365.385658][T17799] RDX: 0000000020000080 RSI: 0000000000000008 RDI: 0000000000000006
[ 1365.393634][T17799] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1365.401603][T17799] R10: 0000000080000003 R11: 0000000000000246 R12: 00007fef7e3a46d4
[ 1365.409636][T17799] R13: 00000000004c4f73 R14: 00000000004d8a28 R15: 0000000000000009
[ 1365.479287][    C1] ------------[ cut here ]------------
[ 1365.485052][    C1] AppArmor WARN cred_label: ((!blob)): 
[ 1365.485333][    C1] WARNING: CPU: 1 PID: 6374 at security/apparmor/include/cred.h:30 apparmor_cred_free+0x12f/0x1a0
[ 1365.489093][ T3865] kobject: 'loop3' (00000000ab3209a9): kobject_uevent_env
[ 1365.490884][    C1] Kernel panic - not syncing: panic_on_warn set ...
[ 1365.506867][ T3865] kobject: 'loop3' (00000000ab3209a9): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1365.508587][    C1] CPU: 1 PID: 6374 Comm: kworker/u4:3 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1365.534133][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1365.544207][    C1] Workqueue: bat_events batadv_tt_purge
[ 1365.549751][    C1] Call Trace:
[ 1365.553031][    C1]  <IRQ>
[ 1365.555887][    C1]  dump_stack+0x1db/0x2d0
[ 1365.560252][    C1]  ? dump_stack_print_info.cold+0x20/0x20
[ 1365.565978][    C1]  ? apparmor_cred_free+0x70/0x1a0
[ 1365.571089][    C1]  panic+0x2cb/0x65c
[ 1365.574989][    C1]  ? add_taint.cold+0x16/0x16
[ 1365.579672][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 1365.584869][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1365.591106][    C1]  ? __probe_kernel_read+0x1f4/0x250
[ 1365.596396][    C1]  ? __warn.cold+0x5/0x48
[ 1365.600732][    C1]  ? __warn+0xe8/0x1d0
[ 1365.604803][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 1365.610008][    C1]  __warn.cold+0x20/0x48
[ 1365.611760][ T3865] kobject: 'loop4' (00000000082ab17d): kobject_uevent_env
[ 1365.614260][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 1365.626568][    C1]  report_bug+0x263/0x2b0
[ 1365.630964][    C1]  do_error_trap+0x11b/0x200
[ 1365.635004][ T3865] kobject: 'loop4' (00000000082ab17d): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1365.635571][    C1]  do_invalid_op+0x37/0x50
[ 1365.650103][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 1365.655304][    C1]  invalid_op+0x14/0x20
[ 1365.659461][    C1] RIP: 0010:apparmor_cred_free+0x12f/0x1a0
[ 1365.665269][    C1] Code: 7c 88 48 c7 c7 80 d2 7c 88 e8 9d 69 f2 fd 0f 0b eb a9 e8 a4 40 29 fe 48 c7 c6 40 e2 7c 88 48 c7 c7 80 d2 7c 88 e8 81 69 f2 fd <0f> 0b 48 b8 00 00 00 00 00 fc ff df 80 38 00 75 4a 4c 8b 2c 25 00
[ 1365.684876][    C1] RSP: 0018:ffff8880ae7079f8 EFLAGS: 00010286
[ 1365.690937][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1365.698918][    C1] RDX: 0000000000000100 RSI: ffffffff81688726 RDI: 0000000000000006
[ 1365.706894][    C1] RBP: ffff8880ae707a18 R08: ffff8880244164c0 R09: ffff888024416d88
[ 1365.714870][    C1] R10: ffff8880244164c0 R11: 0000000000000000 R12: ffff88805f6f0900
22:09:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

22:09:26 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1365.722856][    C1] R13: ffff88805f6f0900 R14: ffff88805f6f0988 R15: dffffc0000000000
[ 1365.730893][    C1]  ? vprintk_func+0x86/0x189
[ 1365.735493][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 1365.740699][    C1]  security_cred_free+0x4b/0xf0
[ 1365.745553][    C1]  put_cred_rcu+0x21f/0x6e0
[ 1365.750065][    C1]  ? get_task_cred+0x5e0/0x5e0
[ 1365.754838][    C1]  ? lock_release+0xc40/0xc40
[ 1365.759525][    C1]  ? file_free_rcu+0x98/0xe0
[ 1365.764122][    C1]  ? kmem_cache_free+0x225/0x260
[ 1365.769073][    C1]  rcu_core+0xc4a/0x1680
[ 1365.773328][    C1]  ? rcu_fwd_progress_check+0xd0/0xd0
22:09:27 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xffffffeffffffffd, 0xffffffffffffffff})
prctl$PR_CAP_AMBIENT(0x7, 0x2, 0x0)

[ 1365.778703][    C1]  ? clockevents_program_event+0x15f/0x380
[ 1365.784515][    C1]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1365.790164][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1365.796405][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1365.802660][    C1]  ? check_preemption_disabled+0x48/0x290
[ 1365.808391][    C1]  ? __lock_is_held+0xb6/0x140
[ 1365.813172][    C1]  __do_softirq+0x30b/0xb11
[ 1365.817688][    C1]  ? __irqentry_text_end+0x1f96d2/0x1f96d2
[ 1365.823636][    C1]  ? kvm_clock_read+0x18/0x30
[ 1365.828322][    C1]  ? kvm_sched_clock_read+0x9/0x20
[ 1365.833472][    C1]  ? sched_clock+0x2e/0x50
[ 1365.837896][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1365.844139][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1365.850380][    C1]  ? check_preemption_disabled+0x48/0x290
[ 1365.850987][T17820] FAULT_INJECTION: forcing a failure.
[ 1365.850987][T17820] name failslab, interval 1, probability 0, space 0, times 0
[ 1365.856116][    C1]  irq_exit+0x180/0x1d0
[ 1365.856131][    C1]  smp_apic_timer_interrupt+0x1b7/0x760
22:09:27 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6(0xa, 0x100803, 0x10000000)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000200)={0x1, 0x8})
dup2(r0, 0xffffffffffffffff)
flock(0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x0)
pipe(0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syslog(0x0, 0x0, 0x0)
getitimer(0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r1, r2, &(0x7f0000000080), 0x80000003)

[ 1365.856146][    C1]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1365.856161][    C1]  ? smp_call_function_single_interrupt+0x640/0x640
[ 1365.856174][    C1]  ? trace_hardirqs_off+0x310/0x310
[ 1365.856185][    C1]  ? task_prio+0x50/0x50
[ 1365.856199][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1365.856224][    C1]  ? check_preemption_disabled+0x48/0x290
[ 1365.898472][ T3865] kobject: 'loop3' (00000000ab3209a9): kobject_uevent_env
[ 1365.899992][    C1]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1365.900014][    C1]  apic_timer_interrupt+0xf/0x20
[ 1365.900027][    C1]  </IRQ>
[ 1365.906279][ T3865] kobject: 'loop3' (00000000ab3209a9): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1365.911964][    C1] RIP: 0010:__local_bh_enable_ip+0x18e/0x270
[ 1365.911978][    C1] Code: 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 df 00 00 00 48 83 3d df 38 45 08 00 0f 84 8f 00 00 00 fb 66 0f 1f 44 00 00 <65> 8b 05 9b a2 b4 7e 85 c0 74 7f 5b 41 5c 41 5d 5d c3 80 3d 3e 53
[ 1365.911985][    C1] RSP: 0018:ffff88808c02f7f8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
[ 1365.911999][    C1] RAX: 1ffffffff1325080 RBX: 0000000000000201 RCX: 1ffff11004882db1
[ 1365.912007][    C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888024416d3c
[ 1365.912015][    C1] RBP: ffff88808c02f810 R08: 0000000000000006 R09: ffff888024416d88
[ 1365.912023][    C1] R10: ffff8880244164c0 R11: 0000000000000000 R12: ffffffff87d83730
[ 1365.912038][    C1] R13: ffff8880244164c0 R14: 00000000000001a9 R15: dffffc0000000000
[ 1366.016440][    C1]  ? batadv_tt_purge+0x570/0xe10
[ 1366.021399][    C1]  ? __local_bh_enable_ip+0x15a/0x270
[ 1366.026803][    C1]  _raw_spin_unlock_bh+0x31/0x40
[ 1366.031768][    C1]  batadv_tt_purge+0x570/0xe10
[ 1366.036562][    C1]  ? batadv_tt_local_purge+0x440/0x440
[ 1366.042021][    C1]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1366.047661][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1366.053901][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1366.060145][    C1]  ? check_preemption_disabled+0x48/0x290
[ 1366.065873][    C1]  ? __lock_is_held+0xb6/0x140
[ 1366.070663][    C1]  process_one_work+0xd0c/0x1ce0
[ 1366.075603][    C1]  ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10
[ 1366.082461][    C1]  ? __switch_to_asm+0x34/0x70
[ 1366.087234][    C1]  ? pwq_dec_nr_in_flight+0x4a0/0x4a0
[ 1366.092606][    C1]  ? __schedule+0x89f/0x1e60
[ 1366.097216][    C1]  ? pci_mmcfg_check_reserved+0x170/0x170
[ 1366.102961][    C1]  ? trace_hardirqs_on_caller+0xc0/0x310
[ 1366.109086][    C1]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1366.114581][    C1]  ? worker_thread+0x3b7/0x14a0
[ 1366.119447][    C1]  ? find_held_lock+0x35/0x120
[ 1366.124214][    C1]  ? lock_acquire+0x1db/0x570
[ 1366.128892][    C1]  ? worker_thread+0x3cd/0x14a0
[ 1366.133752][    C1]  ? kasan_check_write+0x14/0x20
[ 1366.138690][    C1]  ? do_raw_spin_lock+0x156/0x360
[ 1366.143714][    C1]  ? lock_release+0xc40/0xc40
[ 1366.148392][    C1]  ? rwlock_bug.part.0+0x90/0x90
[ 1366.153334][    C1]  ? trace_hardirqs_on_caller+0x310/0x310
[ 1366.159066][    C1]  worker_thread+0x143/0x14a0
[ 1366.163764][    C1]  ? process_one_work+0x1ce0/0x1ce0
[ 1366.168961][    C1]  ? __kthread_parkme+0xc3/0x1b0
[ 1366.173902][    C1]  ? lock_acquire+0x1db/0x570
[ 1366.178581][    C1]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[ 1366.184397][    C1]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1366.189692][    C1]  ? trace_hardirqs_on+0xbd/0x310
[ 1366.194716][    C1]  ? __kthread_parkme+0xc3/0x1b0
[ 1366.199655][    C1]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1366.205461][    C1]  ? do_raw_spin_trylock+0x270/0x270
[ 1366.210765][    C1]  ? schedule+0x108/0x350
[ 1366.215128][    C1]  ? do_raw_spin_trylock+0x270/0x270
[ 1366.220428][    C1]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1366.226234][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1366.232494][    C1]  ? __kthread_parkme+0xfb/0x1b0
[ 1366.237441][    C1]  kthread+0x357/0x430
[ 1366.241537][    C1]  ? process_one_work+0x1ce0/0x1ce0
[ 1366.246734][    C1]  ? kthread_stop+0x920/0x920
[ 1366.251423][    C1]  ret_from_fork+0x3a/0x50
[ 1366.255867][T17820] CPU: 0 PID: 17820 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14
[ 1366.264901][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1366.274953][T17820] Call Trace:
[ 1366.278240][T17820]  dump_stack+0x1db/0x2d0
[ 1366.282570][T17820]  ? dump_stack_print_info.cold+0x20/0x20
[ 1366.288284][T17820]  ? percpu_ref_put_many+0x129/0x270
[ 1366.293566][T17820]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1366.299812][T17820]  should_fail.cold+0xa/0x14
[ 1366.304408][T17820]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1366.310221][T17820]  ? ___might_sleep+0x1e7/0x310
[ 1366.315070][T17820]  ? arch_local_save_flags+0x50/0x50
[ 1366.320380][T17820]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1366.326675][T17820]  __should_failslab+0x121/0x190
[ 1366.331631][T17820]  should_failslab+0x9/0x14
[ 1366.336132][T17820]  __kmalloc+0x2dc/0x740
[ 1366.340370][T17820]  ? kmem_cache_alloc_trace+0x354/0x760
[ 1366.345925][T17820]  ? alloc_pipe_info+0x286/0x580
[ 1366.350866][T17820]  alloc_pipe_info+0x286/0x580
[ 1366.355636][T17820]  ? pipe_read+0x940/0x940
[ 1366.360052][T17820]  ? aa_path_link+0x5d0/0x5d0
[ 1366.364747][T17820]  ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1366.370390][T17820]  ? common_file_perm+0x293/0x820
[ 1366.375452][T17820]  splice_direct_to_actor+0x795/0x9d0
[ 1366.380821][T17820]  ? ksys_dup3+0x660/0x660
[ 1366.385228][T17820]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 1366.390806][T17820]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1366.397042][T17820]  ? do_splice_to+0x190/0x190
[ 1366.401722][T17820]  ? rw_verify_area+0x118/0x360
[ 1366.406569][T17820]  do_splice_direct+0x2c7/0x420
[ 1366.411421][T17820]  ? splice_direct_to_actor+0x9d0/0x9d0
[ 1366.417003][T17820]  ? rw_verify_area+0x118/0x360
[ 1366.421868][T17820]  do_sendfile+0x61a/0xe60
[ 1366.426289][T17820]  ? do_compat_pwritev64+0x1c0/0x1c0
[ 1366.431573][T17820]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1366.437838][T17820]  ? _copy_from_user+0xdd/0x150
[ 1366.442691][T17820]  __x64_sys_sendfile64+0x15a/0x240
[ 1366.447891][T17820]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[ 1366.453175][T17820]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1366.458725][T17820]  do_syscall_64+0x1a3/0x800
[ 1366.463321][T17820]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 1366.468950][T17820]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1366.474699][T17820]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1366.480252][T17820]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1366.486140][T17820] RIP: 0033:0x458099
[ 1366.490028][T17820] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1366.509648][T17820] RSP: 002b:00007fb1b5be5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1366.518053][T17820] RAX: ffffffffffffffda RBX: 00007fb1b5be5c90 RCX: 0000000000458099
[ 1366.526014][T17820] RDX: 0000000020000080 RSI: 0000000000000007 RDI: 0000000000000005
[ 1366.533975][T17820] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1366.541942][T17820] R10: 0000000080000003 R11: 0000000000000246 R12: 00007fb1b5be66d4
[ 1366.549907][T17820] R13: 00000000004c4f73 R14: 00000000004d8a28 R15: 0000000000000008
[ 1366.558927][    C1] Kernel Offset: disabled
[ 1366.563369][    C1] Rebooting in 86400 seconds..