ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:50 executing program 0:

10:37:50 executing program 4:

10:37:50 executing program 5:

10:37:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:50 executing program 4:

10:37:50 executing program 0:

10:37:50 executing program 5:

10:37:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:50 executing program 4:

10:37:51 executing program 5:

10:37:51 executing program 0:

10:37:51 executing program 4:

10:37:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:51 executing program 5:

10:37:51 executing program 4:

10:37:51 executing program 0:

10:37:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:51 executing program 5:

10:37:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:51 executing program 4:

10:37:51 executing program 0:

10:37:51 executing program 5:

10:37:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {0xffffffffffffffff, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:51 executing program 4:

10:37:51 executing program 0:

10:37:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:51 executing program 5:

10:37:51 executing program 4:

10:37:51 executing program 0:

10:37:51 executing program 4:

10:37:51 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:51 executing program 5:

10:37:51 executing program 0:

10:37:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {0xffffffffffffffff, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:52 executing program 5:

10:37:52 executing program 0:

10:37:52 executing program 4:

10:37:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:52 executing program 0:

10:37:52 executing program 4:

10:37:52 executing program 5:

10:37:52 executing program 0:

10:37:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:52 executing program 4:

10:37:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {0xffffffffffffffff, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:53 executing program 5:

10:37:53 executing program 4:

10:37:53 executing program 0:

10:37:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:53 executing program 4:

10:37:53 executing program 0:

10:37:53 executing program 5:

10:37:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:53 executing program 4:

10:37:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:53 executing program 0:

10:37:53 executing program 5:

10:37:53 executing program 4:

10:37:53 executing program 0:

10:37:53 executing program 5:

10:37:53 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f1"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:53 executing program 0:

10:37:53 executing program 4:

10:37:53 executing program 5:

10:37:53 executing program 4:

10:37:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:54 executing program 0:

10:37:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:54 executing program 4:

10:37:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f1"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:54 executing program 5:

10:37:54 executing program 4:

10:37:54 executing program 5:

10:37:54 executing program 0:

10:37:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f1"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:54 executing program 5:

10:37:55 executing program 0:

10:37:55 executing program 4:

10:37:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:55 executing program 5:

10:37:55 executing program 0:

10:37:55 executing program 5:

10:37:55 executing program 4:

10:37:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:55 executing program 0:

10:37:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:55 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x141040, 0x0)
r0 = open(&(0x7f0000001040)='./bus\x00', 0x4005, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001080)={'syz1\x00', {0x1}, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6995, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x5, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x224], [0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)

10:37:55 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000280)='./file0/bus\x00', 0x102)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

10:37:55 executing program 0:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x8000000011, r0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz'})

10:37:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  437.168589] audit: type=1804 audit(1555929475.613:193): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir394002257/syzkaller.yZG2GL/778/bus" dev="sda1" ino=18183 res=1
10:37:55 executing program 0:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000280)='./file0/bus\x00', 0x102)

10:37:55 executing program 5:
recvfrom(0xffffffffffffffff, 0x0, 0xa4, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80)
r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x806, 0x0)
ftruncate(r0, 0x5)
sendfile(r1, r0, 0x0, 0x40801001)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc)

10:37:55 executing program 4:
r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0)
ftruncate(r0, 0x8001)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x806, 0x0)
sendfile(r1, r0, 0x0, 0x40801001)

[  437.259533] audit: type=1804 audit(1555929475.683:194): pid=22029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir394002257/syzkaller.yZG2GL/778/bus" dev="sda1" ino=18183 res=1
10:37:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:55 executing program 0:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00')
removexattr(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0)

10:37:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:56 executing program 5:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0ce5fd653d8185", 0xd9, r1}, 0x68)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:37:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:56 executing program 4:
r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0)
ftruncate(r0, 0x8001)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x806, 0x0)
sendfile(r1, r0, 0x0, 0x40801001)

10:37:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:56 executing program 0:
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:mouse_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x67)

10:37:56 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

10:37:56 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:56 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0)

10:37:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:56 executing program 0:
r0 = getpgrp(0x0)
r1 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8)
rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000140))
r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x8, 0x0)
read(r2, &(0x7f0000000000)=""/128, 0x29d)

10:37:56 executing program 4:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000100)="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", 0xfc)

[  438.235352] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'.
[  438.262062] veth1_to_bridge: FDB only supports static addresses
10:37:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x2}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x97, 0xede, 0x82}, 0x3c)
recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/133, 0x85}], 0x3}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x5, 0x9, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xfec7, &(0x7f00000002c0)=""/129}, 0x48)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

10:37:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r2 = dup2(0xffffffffffffffff, r1)
setsockopt$sock_timeval(r1, 0x1, 0x0, 0x0, 0x0)
listen(r1, 0x80)
ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
rt_sigsuspend(0x0, 0xffffffffffffff4d)
write(r3, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

10:37:57 executing program 5:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0ce5fd653d8185", 0xd9, r1}, 0x68)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:37:57 executing program 0:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0ce5fd653d8185", 0xd9, r1}, 0x68)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:37:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {0xffffffffffffffff, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 5:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0ce5fd653d8185", 0xd9, r1}, 0x68)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:37:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200)

10:37:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:58 executing program 0:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0ce5fd653d8185", 0xd9, r1}, 0x68)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:37:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {0xffffffffffffffff, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:58 executing program 5:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0ce5fd653d8185", 0xd9, r1}, 0x68)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:37:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
r1 = memfd_create(&(0x7f0000000080)='fd\x00', 0x0)
write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/57, 0x39)

10:37:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:58 executing program 0:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0ce5fd653d8185", 0xd9, r1}, 0x68)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:37:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {0xffffffffffffffff, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
write(r0, 0x0, 0x0)

10:37:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:37:58 executing program 5:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000100)="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", 0xfc)

10:37:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x25, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

10:37:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  440.147642] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'.
10:37:58 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

10:37:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  440.188730] veth1_to_bridge: FDB only supports static addresses
10:37:58 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

10:37:58 executing program 4:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000100)="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", 0xfc)

10:37:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:58 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/234, 0xea}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0)

10:37:58 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

[  440.331322] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'.
[  440.360205] veth1_to_bridge: FDB only supports static addresses
10:37:58 executing program 4:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000100)="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", 0xfc)

10:37:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  440.476962] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'.
[  440.490900] veth1_to_bridge: FDB only supports static addresses
10:37:59 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

10:37:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x317}, 0x24}}, 0x0)

10:37:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:59 executing program 4:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4101100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000500c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0)

10:37:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:37:59 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})

10:37:59 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)

10:37:59 executing program 0:
r0 = socket$kcm(0x10, 0x404000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000002200812de45ae087185082cf0124a0eba06ec4000241000000000013000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0)

10:37:59 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

10:37:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:37:59 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)

[  441.129467] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'.
[  441.158099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
10:37:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = getpgid(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r1)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x12})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)

10:37:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  441.175237] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'.
10:37:59 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x0)
read$alg(r2, 0x0, 0x0)

10:37:59 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

[  441.222548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
10:37:59 executing program 0:
r0 = socket$kcm(0x10, 0x404000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000002200812de45ae087185082cf0124a0eba06ec4000241000000000013000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0)

[  441.380432] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'.
[  441.394290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
10:38:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:00 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00\x87\xec\x80\xa4\xb5.\x17\'\x8c\x97\xcd]K\xd01@\xea\x82\xb4x\xe9\xceNC\xe4\xd6\xf1\x89\x8bIY\xbbE\xaf\xb9\x8a\x12e\x1c\xc7;\x00\xb2\xfc\xff\x03\xfb\x19\xb7\xf3\xf1\xf333\xed\x05#4\x98\xfc>_\x98\x7f\x86%\xf7\x8e\x8a\x13@\xd7\xd3#\x98\xec>\xae\x1e];\x10\xea\x93\xff\xb0\xfe\xd1\xcfU\xce\x17\xbb\xc7\x92h\x1cb\r}r\x03\f\xbe\x10Nzj\x15l\xe3\x17\xab\x8b\x8fnX\xb1DT\xa9\xf7\xfd\x17{R2P\xa55\x94R\x92;y\x8e\xe8', 0x200002, 0x0)
fchdir(r0)
r1 = dup3(r0, r0, 0x80000)
fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_default\x00')
write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x6}, 0xb)
r2 = creat(&(0x7f0000000000)='./control\x00', 0x110)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3)
dup3(r2, r0, 0x80000)
mkdir(&(0x7f0000000200)='./control\x00', 0x0)

10:38:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20)

10:38:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:00 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:38:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:38:00 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)

10:38:00 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000005b40), 0x106, 0x0)

10:38:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:00 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
nanosleep(&(0x7f0000000480)={0x77359400}, &(0x7f00000004c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x14)
tkill(r0, 0x1000000000016)

10:38:00 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

10:38:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x5)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20)

10:38:00 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

10:38:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:00 executing program 3:
clone(0x800000409fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000007b00)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x1f, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)

10:38:00 executing program 4:
clone(0x800000409fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000007b00)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x1f, r0, 0x0, 0x0)

10:38:00 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0xb, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0)

10:38:00 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
io_setup(0x0, 0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r3, 0x2081fc)
open(0x0, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x80000000, 0x101})

10:38:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:00 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x7000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:01 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
r1 = memfd_create(&(0x7f0000000080)='fd\x00', 0x0)
write(r1, &(0x7f0000000480)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
fchownat(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1000)

10:38:01 executing program 3:
syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty=[0x0, 0x4888], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

10:38:01 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000080000550001000000000095000000f75600009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

10:38:01 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x7000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:01 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)

10:38:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
munmap(&(0x7f0000000000/0x4000)=nil, 0x4000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:01 executing program 3:
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x313, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000100)='GPL\x00'}, 0x48)

10:38:01 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x7000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:01 executing program 0:
clone(0x210007f9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x5, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x313, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000100)='GPL\x00'}, 0x48)

10:38:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:02 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000a00000010000340140000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)

10:38:02 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x7000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x42, 0x0, &(0x7f00000001c0))

10:38:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:02 executing program 5:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x20000000003, 0x1)
getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000180))

10:38:02 executing program 0:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x800)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002)
rmdir(&(0x7f0000000000)='./bus\x00')
fallocate(r0, 0x40, 0x9, 0x80)
write$binfmt_elf64(r0, &(0x7f0000000740)=ANY=[], 0xfffffffffffffcea)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ustat(0xe, &(0x7f0000000140))
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000240))
fsetxattr(r0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x20000000003, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x0, 0x0, 0x400000000}, 0x20)

10:38:02 executing program 4:
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {0xffffffffffffffff, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:02 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000001140)='net/tcp6\x00')
read$FUSE(r0, &(0x7f0000000000), 0x1000)

10:38:02 executing program 4:
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
r1 = dup2(r0, r0)
io_setup(0x8, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}])

10:38:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:02 executing program 5:

10:38:02 executing program 4:
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:02 executing program 0:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x800)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002)
rmdir(&(0x7f0000000000)='./bus\x00')
fallocate(r0, 0x40, 0x9, 0x80)
write$binfmt_elf64(r0, &(0x7f0000000740)=ANY=[], 0xfffffffffffffcea)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ustat(0xe, &(0x7f0000000140))
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000240))
fsetxattr(r0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x20000000003, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x0, 0x0, 0x400000000}, 0x20)

10:38:02 executing program 3:

10:38:02 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:02 executing program 5:

10:38:02 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {0xffffffffffffffff, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:03 executing program 3:
r0 = getpid()
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)

10:38:03 executing program 5:

10:38:03 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)

10:38:03 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x241, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x21ffc, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000012000)={0xe, 0x0, 0x4, 0x83d3}, 0x2c)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
close(r3)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'lapb0\x00', 0x600})
socket$kcm(0x2, 0x3, 0x2)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000280)={0x5, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4e, 0x8000, 0x2, 0x0, 0x6c8c, 0x0, 0x1, 0x94, 0x4, 0x8, 0x8, 0x0, 0x8b78, 0x6, 0xfffffffffffffff8, 0x0, 0x7f, 0x4, 0xa54, 0x7, 0xffffffffffffff81, 0x7, 0x1, 0x0, 0xfffffffffffffff9, 0x1ff, 0xc91, 0x1000, 0x8, 0x6, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x5, @perf_config_ext={0x74, 0xfffffffffffffff8}, 0x0, 0x1, 0x7b42, 0x7, 0x100, 0xaa81, 0x2})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x10, &(0x7f0000000600)={&(0x7f0000000480)=""/255, 0xff}}, 0x10)
ioctl$TUNGETFILTER(r4, 0x801054db, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0), 0x12)

10:38:03 executing program 5:

10:38:03 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x7000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)

10:38:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {0xffffffffffffffff, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:03 executing program 3:

10:38:03 executing program 5:

10:38:03 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x7000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)

10:38:03 executing program 3:

10:38:03 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x85', 0x241, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x21ffc, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000012000)={0xe, 0x0, 0x4, 0x83d3}, 0x2c)
r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
close(r3)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'lapb0\x00', 0x600})
socket$kcm(0x2, 0x3, 0x2)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000280)={0x5, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4e, 0x8000, 0x2, 0x0, 0x6c8c, 0x0, 0x1, 0x94, 0x4, 0x8, 0x8, 0x0, 0x8b78, 0x6, 0xfffffffffffffff8, 0x0, 0x7f, 0x4, 0xa54, 0x7, 0xffffffffffffff81, 0x7, 0x1, 0x0, 0xfffffffffffffff9, 0x1ff, 0xc91, 0x1000, 0x8, 0x6, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x5, @perf_config_ext={0x74, 0xfffffffffffffff8}, 0x0, 0x1, 0x7b42, 0x7, 0x100, 0xaa81, 0x2})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x10, &(0x7f0000000600)={&(0x7f0000000480)=""/255, 0xff}}, 0x10)
ioctl$TUNGETFILTER(r4, 0x801054db, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0), 0x12)

10:38:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:03 executing program 5:

10:38:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:03 executing program 4:
shmat(0x0, &(0x7f000083b000/0x9000)=nil, 0x7000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0)

10:38:03 executing program 3:

10:38:03 executing program 5:

10:38:03 executing program 3:

10:38:03 executing program 0:

10:38:03 executing program 5:

10:38:03 executing program 4:

10:38:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:03 executing program 3:

10:38:04 executing program 4:

10:38:04 executing program 0:

10:38:04 executing program 5:

10:38:04 executing program 3:

10:38:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:04 executing program 4:

10:38:04 executing program 5:

10:38:04 executing program 0:

10:38:04 executing program 3:

10:38:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:04 executing program 4:

10:38:04 executing program 3:

10:38:04 executing program 0:

10:38:04 executing program 5:

10:38:04 executing program 0:

10:38:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:04 executing program 4:

10:38:04 executing program 3:

10:38:04 executing program 5:

10:38:04 executing program 0:

10:38:05 executing program 3:

10:38:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:05 executing program 4:
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:05 executing program 5:

10:38:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:05 executing program 0:

10:38:05 executing program 3:

10:38:05 executing program 0:

10:38:05 executing program 5:

10:38:05 executing program 0:

10:38:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:05 executing program 3:

10:38:05 executing program 4:
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:05 executing program 5:
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:05 executing program 0:

10:38:05 executing program 3:

10:38:06 executing program 0:

10:38:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:38:06 executing program 4:

10:38:06 executing program 5:

10:38:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:06 executing program 3:

10:38:06 executing program 0:

10:38:06 executing program 4:

10:38:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:38:06 executing program 3:

10:38:06 executing program 5:

10:38:06 executing program 4:

10:38:06 executing program 0:

10:38:06 executing program 4:

10:38:06 executing program 3:

10:38:06 executing program 5:

10:38:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:07 executing program 0:

10:38:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38b81ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:38:07 executing program 3:

10:38:07 executing program 4:

10:38:07 executing program 5:

10:38:07 executing program 4:

10:38:07 executing program 3:

10:38:07 executing program 0:

10:38:07 executing program 5:

10:38:07 executing program 4:

10:38:07 executing program 2:

10:38:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {0xffffffffffffffff, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:08 executing program 5:

10:38:08 executing program 0:

10:38:08 executing program 3:

10:38:08 executing program 2:

10:38:08 executing program 4:

10:38:08 executing program 3:

10:38:08 executing program 5:

10:38:08 executing program 2:

10:38:08 executing program 0:

10:38:08 executing program 4:

10:38:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {0xffffffffffffffff, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:08 executing program 5:

10:38:08 executing program 2:

10:38:08 executing program 4:

10:38:08 executing program 0:

10:38:08 executing program 3:

10:38:08 executing program 5:

10:38:08 executing program 0:

10:38:08 executing program 4:

10:38:08 executing program 2:

10:38:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {0xffffffffffffffff, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:08 executing program 3:

10:38:08 executing program 5:

10:38:08 executing program 0:

10:38:08 executing program 2:

10:38:08 executing program 4:

10:38:08 executing program 5:

10:38:08 executing program 3:

10:38:08 executing program 0:

10:38:08 executing program 5:

10:38:08 executing program 4:

10:38:08 executing program 2:

10:38:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:09 executing program 3:

10:38:09 executing program 0:

10:38:09 executing program 5:

10:38:09 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190)

10:38:09 executing program 2:
open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x11, 0x0, 0xd000000)

10:38:09 executing program 3:

10:38:09 executing program 0:

[  450.873227] audit: type=1800 audit(1555929489.323:195): pid=22800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=18339 res=0
10:38:09 executing program 5:

10:38:09 executing program 4:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190)

10:38:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:09 executing program 0:

10:38:09 executing program 3:

10:38:09 executing program 5:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x401, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x6, 0xf, 0x0, 0x2, 0x1}, r0, 0x2, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000006c0000008400000000000000923106be97e85c3488fd36125183c62da3fd4e83dedad84ff331f67e9aaf4a86da6cfb8e7471005c22fd1006d4acb3ac2d9ae27eab684449baffa2a2905450220a6316f4a00706939e60f51700f0511e161e5645b4858a56daabbed58928038d0c2b23ae9d49ee176899d742e162702d5934154a75357243059836b0aa1c7140ccf2cce028d842bd714ff71b40c49170b4f20213bce25081d92f2f33c56b81cff0f96abfa81714331df5f48e7741e6e0ed650994de3db667f9917c3764c751532ec9f2d248ebc5f696c4bc8ac1f7d1671072d5fcc89c990e2622e882f25b75912444233473171e0a94782c4bfaa8b8178ff8c27c1f30609ed1af7f852fe18500"], 0x0, 0x115}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x101)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x8}, 0x40000000)

10:38:09 executing program 2:
open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x11, 0x0, 0xd000000)

10:38:09 executing program 4:
open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x11, 0x0, 0xd000000)

10:38:09 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getpgid(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:09 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}}, 0x90)

[  451.202427] audit: type=1800 audit(1555929489.653:196): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=18401 res=0
10:38:09 executing program 3:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r1, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
bind$alg(r2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x5412, &(0x7f0000000080))

[  451.332073] audit: type=1800 audit(1555929489.703:197): pid=22833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18410 res=0
10:38:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:09 executing program 5:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x401, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x6, 0xf, 0x0, 0x2, 0x1}, r0, 0x2, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000006c0000008400000000000000923106be97e85c3488fd36125183c62da3fd4e83dedad84ff331f67e9aaf4a86da6cfb8e7471005c22fd1006d4acb3ac2d9ae27eab684449baffa2a2905450220a6316f4a00706939e60f51700f0511e161e5645b4858a56daabbed58928038d0c2b23ae9d49ee176899d742e162702d5934154a75357243059836b0aa1c7140ccf2cce028d842bd714ff71b40c49170b4f20213bce25081d92f2f33c56b81cff0f96abfa81714331df5f48e7741e6e0ed650994de3db667f9917c3764c751532ec9f2d248ebc5f696c4bc8ac1f7d1671072d5fcc89c990e2622e882f25b75912444233473171e0a94782c4bfaa8b8178ff8c27c1f30609ed1af7f852fe18500"], 0x0, 0x115}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x101)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x8}, 0x40000000)

[  451.683724] overlayfs: './file0' not a directory
10:38:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:10 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x5423, &(0x7f0000000080))

10:38:10 executing program 4:
r0 = open(0x0, 0x40c2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0xd000000)

10:38:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:10 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x3f00]}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190)

10:38:10 executing program 3:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r1, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
bind$alg(r2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:10 executing program 5:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r1, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
bind$alg(r2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:10 executing program 0:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bind$alg(r2, 0x0, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x7005, 0x0)

10:38:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:10 executing program 4:
r0 = open(0x0, 0x40c2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0xd000000)

10:38:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

[  452.398673] overlayfs: './file0' not a directory
10:38:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:11 executing program 4:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:11 executing program 0:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bind$alg(r2, 0x0, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x7005, 0x0)

10:38:11 executing program 3:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bind$alg(r2, 0x0, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x7005, 0x0)

10:38:11 executing program 5:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bind$alg(r2, 0x0, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x7005, 0x0)

10:38:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

[  452.812400] audit: type=1800 audit(1555929491.263:198): pid=22906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16866 res=0
10:38:11 executing program 2:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000080))

10:38:11 executing program 4:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000002000000020000000000000000300000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0)

10:38:11 executing program 2:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000080))

10:38:11 executing program 2:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000080))

[  453.044459] f2fs_msg: 6 callbacks suppressed
[  453.044467] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  453.065110] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  453.073273] F2FS-fs (loop4): Small segment_count (22 < 2 * 14)
[  453.080746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
10:38:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

[  453.096549] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  453.109187] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  453.117639] F2FS-fs (loop4): Small segment_count (22 < 2 * 14)
[  453.123913] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  453.172244] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  453.182873] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
10:38:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:12 executing program 4:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
ftruncate(r0, 0x81fb)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
pread64(r1, &(0x7f0000005000)=""/4096, 0x1000, 0x0)

10:38:12 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

10:38:12 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7fff, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})

10:38:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef)

10:38:12 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x540b, 0x0)

10:38:12 executing program 4:
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x800)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x380000000001}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0)

10:38:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:12 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

[  453.736282] audit: type=1804 audit(1555929492.183:199): pid=22953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir642071829/syzkaller.mkzbsM/849/bus" dev="sda1" ino=16787 res=1
10:38:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:12 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

10:38:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  453.897745] device nr0
 entered promiscuous mode
10:38:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:12 executing program 0:
ioctl(0xffffffffffffffff, 0x2ab8d183, &(0x7f00000000c0)="0ab6050000001700000000")
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4)
gettid()
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x200000)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4", 0x35}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000002600))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000a40)={0x2, 0x3ffffffffffffffe, @empty}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000002300)='/dev/input/event#\x00', 0x1f, 0x501400)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000340)=""/188)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000023c0)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @multicast2}, {0x2, 0x0, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x9})
select(0x40, &(0x7f0000002280)={0x40, 0x8, 0x57c0, 0x0, 0x8, 0x401, 0x5, 0x5}, &(0x7f00000022c0)={0x2, 0x8, 0x7, 0x6, 0x0, 0x0, 0x75, 0x6}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)

[  453.924543] audit: type=1804 audit(1555929492.213:200): pid=22953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir642071829/syzkaller.mkzbsM/849/bus" dev="sda1" ino=16787 res=1
10:38:12 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

10:38:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  454.087704] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
10:38:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:12 executing program 4:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x0, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x1}, r1, 0x2, r0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x115}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x101)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x102, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x9}, 0x40000000)

10:38:12 executing program 5:
read$alg(0xffffffffffffffff, 0x0, 0x0)

10:38:12 executing program 3:
ioctl(0xffffffffffffffff, 0x2ab8d183, &(0x7f00000000c0)="0ab6050000001700000000")
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4)
gettid()
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x200000)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4", 0x35}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000002600))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000a40)={0x2, 0x3ffffffffffffffe, @empty}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000002300)='/dev/input/event#\x00', 0x1f, 0x501400)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000340)=""/188)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000023c0)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @multicast2}, {0x2, 0x0, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x9})
select(0x40, &(0x7f0000002280)={0x40, 0x8, 0x57c0, 0x0, 0x8, 0x401, 0x5, 0x5}, &(0x7f00000022c0)={0x2, 0x8, 0x7, 0x6, 0x0, 0x0, 0x75, 0x6}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)

10:38:12 executing program 0:
ioctl(0xffffffffffffffff, 0x2ab8d183, &(0x7f00000000c0)="0ab6050000001700000000")
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4)
gettid()
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x200000)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4", 0x35}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000002600))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000a40)={0x2, 0x3ffffffffffffffe, @empty}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000002300)='/dev/input/event#\x00', 0x1f, 0x501400)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000340)=""/188)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000023c0)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @multicast2}, {0x2, 0x0, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x9})
select(0x40, &(0x7f0000002280)={0x40, 0x8, 0x57c0, 0x0, 0x8, 0x401, 0x5, 0x5}, &(0x7f00000022c0)={0x2, 0x8, 0x7, 0x6, 0x0, 0x0, 0x75, 0x6}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)

[  454.137280] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
10:38:12 executing program 5:
read$alg(0xffffffffffffffff, 0x0, 0x0)

10:38:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

[  454.223541] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
10:38:12 executing program 0:
ioctl(0xffffffffffffffff, 0x2ab8d183, &(0x7f00000000c0)="0ab6050000001700000000")
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4)
gettid()
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x200000)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4", 0x35}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000002600))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000a40)={0x2, 0x3ffffffffffffffe, @empty}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000002300)='/dev/input/event#\x00', 0x1f, 0x501400)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000340)=""/188)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000023c0)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @multicast2}, {0x2, 0x0, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x9})
select(0x40, &(0x7f0000002280)={0x40, 0x8, 0x57c0, 0x0, 0x8, 0x401, 0x5, 0x5}, &(0x7f00000022c0)={0x2, 0x8, 0x7, 0x6, 0x0, 0x0, 0x75, 0x6}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)

[  454.309769] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
10:38:12 executing program 5:
read$alg(0xffffffffffffffff, 0x0, 0x0)

10:38:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

[  454.417917] FAT-fs (loop3): Directory bread(block 64) failed
[  454.443015] FAT-fs (loop3): Directory bread(block 65) failed
[  454.459624] FAT-fs (loop3): Directory bread(block 66) failed
10:38:12 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

[  454.476796] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[  454.477140] FAT-fs (loop3): Directory bread(block 67) failed
[  454.527249] FAT-fs (loop3): Directory bread(block 68) failed
[  454.555841] FAT-fs (loop3): Directory bread(block 69) failed
[  454.572556] FAT-fs (loop3): Directory bread(block 70) failed
[  454.578652] FAT-fs (loop3): Directory bread(block 71) failed
[  454.586141] FAT-fs (loop3): Directory bread(block 72) failed
[  454.593260] FAT-fs (loop3): Directory bread(block 73) failed
10:38:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:13 executing program 4:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x0, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x1}, r1, 0x2, r0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000006c0000008400000000000000923106be97e85c3488fd36125183c62da3fd4e83dedad84ff331f67e9aaf4a86da6cfb8e7471005c22fd1006d4acb3ac2d9ae27eab684449baffa2a2905450220a6316f4a00706939e60f51700f0511e161e5645b4858a56daabbed58928038d0c2b23ae9d49ee176899d742e162702d5934154a75357243059836b0aa1c7140ccf2cce028d842bd714ff71b40c49170b4f20213bce25081d92f2f33c56b81cff0f96abfa81714331df5f48e7741e6e0ed650994de3db667f9917c3764c751532ec9f2d248ebc5f696c4bc8ac1f7d1671072d5fcc89c990e2622e882f25b75912444233473171e0a94782c4bfaa8b8178ff8c27c1f30609ed1af7f852fe18500"], 0x0, 0x115}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x101)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x102, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x9}, 0x40000000)

10:38:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:13 executing program 0:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x0, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x1}, r1, 0x2, r0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x115}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x101)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x102, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x9}, 0x40000000)

10:38:13 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

10:38:13 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5)
sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x2880, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x7, &(0x7f0000000200)=""/20, 0xc2b}, 0x300)

10:38:13 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

10:38:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:13 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

10:38:13 executing program 0:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r0, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfc"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', 0x0, &(0x7f0000000500)=""/227, 0xe3)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(r1, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:38:13 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

10:38:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
ioctl$TCSETA(r0, 0x8910, &(0x7f0000000080))

10:38:13 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)

[  455.473144] overlayfs: './file0' not a directory
10:38:14 executing program 3:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r0, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfc"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', 0x0, &(0x7f0000000500)=""/227, 0xe3)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(r1, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000080))

10:38:14 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00\x92\x16\x15w\x90\xb6\xf6K\xa9A%\x16\xbaIc=@o\v\xbd~\xca\v\xc4\xf1\xd5\x02^\xac\xc9\xc9\xc6d9\xd6\x8b3\xc3b\x10\x80\f\xc1g\xa2\x0eK\x82\x17|\xc4\xa6vTx\xad\xda', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='memory.high\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='T', 0x1}], 0x1)

10:38:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:38:14 executing program 0:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r0, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfc"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', 0x0, &(0x7f0000000500)=""/227, 0xe3)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(r1, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000080))

10:38:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:38:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:38:14 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
fallocate(r0, 0x3, 0x0, 0x100000001)

10:38:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000080))

10:38:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:38:14 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
memfd_create(0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x100000001)

10:38:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x6, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, 0x0)

10:38:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:38:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:38:14 executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17Fr>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\x7f\f\x00\x00\x00k\xf1y\xed(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
fallocate(r0, 0x11, 0x0, 0x100000001)

10:38:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, 0x0)

10:38:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:14 executing program 0:
clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet(0x2, 0x3, 0x800000000000b)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x340, [0x20000140, 0x0, 0x0, 0x20000170, 0x200003a8], 0x3, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000030000000000000000007465616d5f736c6176655f3100000000766c616e30000000000000000000000076657468315f746f5f7465616d00000064756d6d793000000000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000d8010000d80100000802000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000636f6d6d656e740000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000110000000000000000000300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a8000000736e6174002f34e7e426f888d383780000000000000000000000000000000000000000000000000000001000008100000000aaaaaaaaaa00"]}, 0x3b8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

10:38:14 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
ioctl$TCSETA(r0, 0x8910, 0x0)

10:38:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="7365bd6375f269747900000000c1ffffffffffffffe736a7ec4a63a4a1ac2a31a43161d43e2d0000000e00ab0200400000009600003e5a7c5f"], 0x1)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2f)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0))
ptrace$cont(0x1f, r1, 0x0, 0x0)

10:38:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:14 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000680)={'filter\x00'}, 0x0)

10:38:14 executing program 5:
pipe(&(0x7f00000016c0)={<r0=>0xffffffffffffffff})
close(r0)
eventfd(0x0)
io_setup(0x1, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

10:38:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x0)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:15 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c4001000000020000000000000001634040"], 0x0, 0x0, 0x0})

10:38:15 executing program 4:
open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0)
r1 = open(&(0x7f0000000400)='./file0\x00', 0x611, 0x0)
fcntl$setstatus(r1, 0x4, 0x80)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000500)="a9829fe0bed427f15ab192e596a62b36578d3ca5f3066cbdf096f7d69dd86cbc249743388539553a4b1195d7e379b232cc35f99a30c9ccae4b9354bc834de8f113c66d858faa194531c532dd3e6a0c7ff833427a88e6653670f8415a400242999b2c5d31110b069625195f9b6128408895d8b12a9a89c839b6ae2847f6701bd8f8b2e2c5f0ca34288e1b54684841906023902655914c9f4d3b4cb8258e13311910378aa057b5e6c6dd9999bae784969d0a27c9b05f3d68ffb806f465e6bd41df24419583e3af186a05535cc07e88d98e15d7", 0xd2}], 0x1, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
sync()

10:38:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x3, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2f, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff85, 0x0, 0x0, 0x0, [0x9, 0x29, 0x81000000], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

[  456.563052] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
[  456.579500] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
10:38:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000009d00)=[{{&(0x7f0000000280)=@nl=@unspec, 0x80, &(0x7f0000001740)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/106, 0x6a}, {&(0x7f0000001640)=""/234, 0xea}], 0x7, &(0x7f00000017c0)=""/148, 0x94}, 0x401}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0)

[  456.659760] binder: 23197:23207 transaction failed 29189/-22, size 0-0 line 2802
10:38:15 executing program 5:

10:38:15 executing program 0:

[  456.700929] binder: undelivered TRANSACTION_ERROR: 29189
[  456.708075] binder: 23197:23207 transaction failed 29189/-22, size 0-0 line 2802
[  456.711596] binder: 23197:23213 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  456.726449] binder: 23197:23213 got reply transaction with no transaction stack
10:38:15 executing program 5:

[  456.747098] binder: 23197:23213 transaction failed 29201/-71, size 0-0 line 2709
[  456.767395] binder: undelivered TRANSACTION_ERROR: 29189
[  456.773047] binder: undelivered TRANSACTION_ERROR: 29201
10:38:17 executing program 3:

10:38:17 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x40)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="8907040000", 0x5)
sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000240)=@in, 0x80, 0x0}}], 0x1, 0x0)

10:38:17 executing program 0:
semget(0x0, 0x3, 0x386)

10:38:17 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x200000000000002, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth0\x00', 0x201a})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@rand_addr="489592572ca0aed6de1b4bc6da12572c", 0x0, r3})
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c)
sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0)
dup3(r1, r2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x23}}, 0x1c)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f00000000c0))

10:38:17 executing program 5:

10:38:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x0)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x0)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:18 executing program 0:
semget(0x0, 0x3, 0x386)

10:38:18 executing program 5:

10:38:18 executing program 3:

10:38:18 executing program 2:

10:38:18 executing program 4:

10:38:18 executing program 3:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)

10:38:18 executing program 5:

10:38:18 executing program 4:

10:38:18 executing program 0:

10:38:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:18 executing program 3:

10:38:18 executing program 5:

10:38:18 executing program 2:

10:38:18 executing program 4:

10:38:18 executing program 0:

10:38:18 executing program 5:

10:38:18 executing program 3:

10:38:18 executing program 2:

10:38:18 executing program 4:

10:38:18 executing program 0:

10:38:18 executing program 5:

10:38:18 executing program 0:

10:38:18 executing program 3:

10:38:18 executing program 2:

10:38:18 executing program 4:

10:38:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:18 executing program 5:

10:38:18 executing program 3:

10:38:19 executing program 2:

10:38:19 executing program 5:

10:38:19 executing program 4:

10:38:19 executing program 3:

10:38:19 executing program 0:

10:38:19 executing program 5:

10:38:19 executing program 2:

10:38:19 executing program 4:

10:38:19 executing program 3:

10:38:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:19 executing program 0:

10:38:19 executing program 5:

10:38:19 executing program 2:

10:38:19 executing program 3:

10:38:19 executing program 4:

10:38:19 executing program 4:

10:38:19 executing program 2:

10:38:19 executing program 3:

10:38:19 executing program 0:

10:38:19 executing program 5:

10:38:20 executing program 2:

10:38:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, 0x0, 0x0, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:20 executing program 4:

10:38:20 executing program 3:

10:38:20 executing program 0:

10:38:20 executing program 5:

10:38:20 executing program 2:

10:38:20 executing program 3:

10:38:20 executing program 0:

10:38:20 executing program 2:

10:38:20 executing program 5:

10:38:20 executing program 0:

10:38:20 executing program 3:

10:38:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, 0x0, 0x0, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:21 executing program 4:

10:38:21 executing program 2:

10:38:21 executing program 0:

10:38:21 executing program 3:

10:38:21 executing program 5:

10:38:21 executing program 2:

10:38:21 executing program 0:

10:38:21 executing program 3:

10:38:21 executing program 5:

10:38:21 executing program 4:

10:38:21 executing program 3:

10:38:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, 0x0, 0x0, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:22 executing program 0:

10:38:22 executing program 2:

10:38:22 executing program 3:

10:38:22 executing program 4:

10:38:22 executing program 5:

10:38:22 executing program 5:

10:38:22 executing program 3:

10:38:22 executing program 4:

10:38:22 executing program 2:

10:38:22 executing program 0:

10:38:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400), 0x0, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:22 executing program 4:

10:38:22 executing program 5:

10:38:22 executing program 3:

10:38:22 executing program 0:

10:38:22 executing program 2:

10:38:22 executing program 5:

10:38:22 executing program 4:

10:38:22 executing program 3:

10:38:22 executing program 0:

10:38:22 executing program 2:

10:38:22 executing program 3:

10:38:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400), 0x0, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:23 executing program 4:

10:38:23 executing program 0:

10:38:23 executing program 2:

10:38:23 executing program 5:

10:38:23 executing program 3:

10:38:23 executing program 0:

10:38:23 executing program 2:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x1000000200000581)
r2 = dup2(r1, r0)
write$P9_RLINK(r2, 0x0, 0x0)
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0)

10:38:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{0x0}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0)

10:38:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}}, 0x1c}}, 0x0)

10:38:23 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x17, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x6, 0x61, 0x0, 0x4}]}, &(0x7f0000000000)='Q\xa2\xa2\x11\xbbo-\x95\xd3\xc0I\x960(U\x06\t.\xc3\t\xa4\xd5\x99\x02_2\x01\r\xf8\xedxR\xc2\a\xc0\x17\x15k3\xfc\xe7\x9d\xea\xe7\x19M#\"N\xe4\xe4\xc5\xe3!\xfd\x80\xb7', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34)

10:38:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0)

10:38:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400), 0x0, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680})

10:38:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14)
close(r0)

10:38:24 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/current\x00')
write$P9_RWSTAT(r0, 0x0, 0x0)

10:38:24 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)

10:38:24 executing program 3:
sched_setaffinity(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
dup3(r0, r1, 0x0)

10:38:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{0x0}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680})

10:38:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:38:24 executing program 3:

10:38:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{0x0}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:24 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000500)=""/6}], 0x15c, 0x0)

10:38:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x207, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

10:38:24 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x59de, 0x0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

10:38:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/234, 0xea}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

10:38:24 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

10:38:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

10:38:24 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0'}, 0xb)

10:38:24 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x59de, 0x0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

10:38:24 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x59de, 0x0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

10:38:24 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423)
clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
lseek(r0, 0x0, 0x0)
write$P9_RLOCK(r0, 0x0, 0xffffffffffffffe7)

10:38:24 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x59de, 0x0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

10:38:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{0x0}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:25 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180), 0x12)

10:38:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = getpgrp(0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000100)='fdinfo\x00')
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f00000001c0))
prctl$PR_SET_PTRACER(0x59616d61, r1)
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd9c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f260819e24134091ec15ef28188179"}, 0xd8)
bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="03030300000007ff00030000000000000002e0cbd927048657c29d3344a1cae1b8eba0d4d66fa6be43455710"], 0x1, 0x1)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101000, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x1)
ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x11, r5, 0x0)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x2000000000000023)
write$binfmt_elf64(r4, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0xab, 0x0, 0xffffffffffffff65, 0x3, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x24e, 0x40, 0x2f7, 0x9, 0x8, 0x38, 0x1, 0x7, 0x40, 0x62}, [{0x1, 0x1, 0x8, 0x0, 0x799, 0x1, 0xa000000000000000, 0x9}, {0x1, 0x7, 0x0, 0x5, 0x7, 0x400, 0xdb, 0x6}], "a856eb22f906213d0f5a512556f6b4b1", [[], [], [], []]}, 0x4c0)

10:38:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000001c0)=0x3, 0x4)
sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)=@caif=@rfm={0x25, 0x2, "cd63ac6de8bd3c404654eaf9280cc6d3"}, 0x80, 0x0}}], 0x1, 0x0)

10:38:25 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "98abfabb830e70337e35629ad0b2e82d222d6df5efefdcdc36d41d14e395e350d29ef2ce35a6abc63d"}, 0x34)

10:38:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xfffffea0}, 0x2000008f)

10:38:25 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)

10:38:25 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

10:38:25 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r2, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xfffffea0}, 0x2000008f)

10:38:25 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x1000000200000581)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$P9_RLINK(r2, &(0x7f0000000000)={0x7}, 0x2dd)
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x8f)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000380)={0x263, @time={0x0, 0x1c9c380}})

[  466.983610] audit: type=1400 audit(1555929505.433:201): avc:  denied  { map } for  pid=23577 comm="syz-executor.4" path="socket:[94391]" dev="sockfs" ino=94391 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1
10:38:25 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x0)
fsync(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0'}, 0xb)

10:38:25 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f17})

10:38:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{0x0}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:26 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

10:38:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)

10:38:26 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000002480)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000))

10:38:26 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/145, 0x91, 0x10000000000001)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x7)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r0 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB])
fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000200)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="211a80c3c1679663e8593f180452d399189974dd44cba048afe47e2c52d18021d163dbd99786b4af2285d280a7e146b9d9509b3ffa2fd65bfabe0a1b67f2ac7d0b1a624ebf22bfec5072e882a05916671b7dab40b18b3b1aa418bb271ed301d78ca10484cb6d26fd46fa32854dd4db1e4055fc842baff77015bfa443bc0b9a67b858807c794a15f900d9d0731b29d1e8f7219e86e6723573770f9623e794cc007a45e944871e3ccd2e92b2bbad48c60c6196656e8163c6096a7470376d953154e891fffde3388f8644755098d85e84849d8c0c", 0xd3, r1}, 0x68)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
ioctl$TIOCNXCL(r2, 0x540d)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

10:38:26 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)

10:38:26 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

10:38:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)

[  467.957056] FAT-fs (loop3): Directory bread(block 64) failed
[  467.991120] FAT-fs (loop3): Directory bread(block 65) failed
10:38:26 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

[  468.013344] FAT-fs (loop3): Directory bread(block 66) failed
[  468.023526] FAT-fs (loop3): Directory bread(block 67) failed
[  468.040501] FAT-fs (loop5): Directory bread(block 64) failed
[  468.042372] FAT-fs (loop3): Directory bread(block 68) failed
[  468.051566] FAT-fs (loop5): Directory bread(block 65) failed
10:38:26 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0))

[  468.066170] FAT-fs (loop5): Directory bread(block 66) failed
[  468.068557] FAT-fs (loop3): Directory bread(block 69) failed
[  468.085023] FAT-fs (loop3): Directory bread(block 70) failed
[  468.091810] FAT-fs (loop5): Directory bread(block 67) failed
[  468.095483] FAT-fs (loop3): Directory bread(block 71) failed
[  468.101856] FAT-fs (loop5): Directory bread(block 68) failed
10:38:26 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f17})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffc)

[  468.133082] FAT-fs (loop5): Directory bread(block 69) failed
[  468.146351] audit: type=1400 audit(1555929506.593:202): avc:  denied  { setattr } for  pid=23616 comm="syz-executor.2" path="socket:[94042]" dev="sockfs" ino=94042 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  468.175008] FAT-fs (loop3): Directory bread(block 72) failed
10:38:26 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0))

[  468.179927] FAT-fs (loop5): Directory bread(block 70) failed
[  468.187892] FAT-fs (loop5): Directory bread(block 71) failed
[  468.196136] FAT-fs (loop5): Directory bread(block 72) failed
[  468.197843] FAT-fs (loop3): Directory bread(block 73) failed
[  468.202655] FAT-fs (loop5): Directory bread(block 73) failed
10:38:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:27 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x0)

10:38:27 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0)

10:38:27 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1})

10:38:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)

10:38:27 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0))

10:38:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:27 executing program 4:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

10:38:27 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000023c0)={0x2, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x180, 0x8, 0x5, 0x1000})

10:38:27 executing program 0:
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(&(0x7f0000000340)='./file0/file0\x00', 0xf0, 0x0)
syncfs(r1)
renameat2(r0, &(0x7f0000000180)='./file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0)

10:38:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:27 executing program 4:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

10:38:27 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
link(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00')

[  468.922561] FAT-fs (loop5): Directory bread(block 64) failed
[  468.957762] FAT-fs (loop5): Directory bread(block 65) failed
[  468.985084] FAT-fs (loop5): Directory bread(block 66) failed
[  469.016798] FAT-fs (loop5): Directory bread(block 67) failed
10:38:27 executing program 0:
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
futex(&(0x7f00000004c0)=0x2, 0x4, 0x0, 0x0, 0x0, 0x2)

[  469.051835] FAT-fs (loop5): Directory bread(block 68) failed
[  469.076801] FAT-fs (loop5): Directory bread(block 69) failed
[  469.101361] FAT-fs (loop5): Directory bread(block 70) failed
[  469.114808] FAT-fs (loop5): Directory bread(block 71) failed
[  469.125379] FAT-fs (loop5): Directory bread(block 72) failed
[  469.132148] FAT-fs (loop5): Directory bread(block 73) failed
10:38:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:38:27 executing program 4:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0))

10:38:27 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)

10:38:27 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)

10:38:27 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0)

10:38:27 executing program 2:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
mmap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)

10:38:27 executing program 4:
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0))

10:38:27 executing program 0:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0)
sendfile(r0, r0, &(0x7f0000000040), 0x7f)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x618000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37)
r1 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0)

[  469.355237] audit: type=1400 audit(1555929507.803:203): avc:  denied  { map } for  pid=23725 comm="syz-executor.2" path="/selinux/status" dev="selinuxfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1
10:38:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:28 executing program 4:
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0))

10:38:28 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = epoll_create(0x143)
r2 = epoll_create(0x60000000007)
r3 = epoll_create(0x7fffffff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4))
r4 = epoll_create(0x4)
r5 = epoll_create(0x21)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000080))
r6 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4))
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4))

10:38:28 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0)

10:38:28 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)

10:38:28 executing program 0:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0)
sendfile(r0, r0, &(0x7f0000000040), 0x7f)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x618000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37)
r1 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0)

10:38:28 executing program 4:
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0))

10:38:28 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
getdents(r0, &(0x7f00000001c0)=""/4096, 0x1ff)

10:38:28 executing program 2:
r0 = socket$unix(0x1, 0x1000000000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000140)=0xffff, 0x4)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r1, 0x0, 0x0, 0x0)

10:38:28 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)

10:38:28 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)

10:38:28 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
getdents(r0, &(0x7f00000001c0)=""/4096, 0x1ff)

10:38:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:29 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = epoll_create(0x143)
r2 = epoll_create(0x7f)
r3 = epoll_create(0x7fffffff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x5})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4))

10:38:29 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)

10:38:29 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)

10:38:29 executing program 0:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0)
sendfile(r0, r0, &(0x7f0000000040), 0x7f)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x618000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37)
r1 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0)

10:38:29 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000100)=""/40, 0x1d5)

10:38:29 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/40, 0x2b8)
getdents64(r0, 0x0, 0x0)

[  470.736730] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
10:38:29 executing program 3:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r0, 0x0)

10:38:29 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)

10:38:29 executing program 4:
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
futex(&(0x7f00000004c0)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2)

10:38:29 executing program 2:
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000001eb, 0x0)

10:38:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0)
process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000540)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x1fe, 0x2000000)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000))
r2 = gettid()
process_vm_readv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/53, 0x35}, {0x0}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x9, &(0x7f0000000500)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001780)=""/107, 0x6b}], 0x2, 0x0)
socket(0xa, 0x0, 0x1ff)

[  470.879730] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
[  470.902667] audit: type=1804 audit(1555929509.353:204): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir181741326/syzkaller.PJPFkN/842/bus" dev="sda1" ino=18468 res=1
[  470.989465] audit: type=1804 audit(1555929509.353:205): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir181741326/syzkaller.PJPFkN/842/bus" dev="sda1" ino=18468 res=1
10:38:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:30 executing program 3:
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002012, r0, 0x0)

10:38:30 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$P9_RSTATu(r1, &(0x7f0000000040)=ANY=[], 0x445144e9)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r3 = open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x3)

10:38:30 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x1000)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000280), 0x700, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0)

10:38:30 executing program 2:
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000001eb, 0x0)

10:38:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0)
process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000540)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x1fe, 0x2000000)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000))
r2 = gettid()
process_vm_readv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/53, 0x35}, {0x0}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x9, &(0x7f0000000500)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001780)=""/107, 0x6b}], 0x2, 0x0)
socket(0xa, 0x0, 0x1ff)

10:38:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455c9, 0x0)

[  471.673815] audit: type=1804 audit(1555929510.123:206): pid=23859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir181741326/syzkaller.PJPFkN/843/bus" dev="sda1" ino=18489 res=1
10:38:30 executing program 5:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4d7b, 0x800000000105082)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f00000ddff8), 0x10200000e)

10:38:30 executing program 2:
socket(0x100000800000011, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x40)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0)

[  471.803608] audit: type=1804 audit(1555929510.133:207): pid=23859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir181741326/syzkaller.PJPFkN/843/bus" dev="sda1" ino=18489 res=1
10:38:30 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d00fe140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff021f0000000000000000000000000105000500008000000a0002000000000003000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0)

10:38:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000))

[  472.224998] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  472.257918] audit: type=1804 audit(1555929510.703:208): pid=23861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir344420489/syzkaller.5KjoSH/715/file1" dev="sda1" ino=18485 res=1
10:38:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000))

10:38:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:30 executing program 5:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4d7b, 0x800000000105082)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f00000ddff8), 0x10200000e)

[  472.609437] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'.
10:38:31 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))

10:38:31 executing program 3:
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pselect6(0xffaf, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfb})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

10:38:31 executing program 2:
socket(0x100000800000011, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x40)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0)

10:38:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000a00000010000340140000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0)

10:38:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  472.748778] audit: type=1804 audit(1555929511.193:209): pid=23867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir344420489/syzkaller.5KjoSH/715/file1" dev="sda1" ino=18485 res=1
10:38:31 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ff0000/0x1000)=nil)

10:38:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}, [@RTA_TTL_PROPAGATE={0x8, 0x4, 0x15}]}, 0x24}}, 0x0)

10:38:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f121c123f319bd070")
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0x80045519, 0x0)

[  472.875470] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'.
[  472.902119] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
10:38:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:31 executing program 4:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f00000ddff8), 0x10200000e)

10:38:31 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x202)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

10:38:31 executing program 5:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4d7b, 0x800000000105082)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f00000ddff8), 0x10200000e)

10:38:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
socket$netlink(0x10, 0x3, 0x8)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:34 executing program 3:
clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
socket$inet(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3b8)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x12)
wait4(0x0, 0x0, 0x0, 0x0)

10:38:34 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x2}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x5, 0x5, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0x81, &(0x7f00000002c0)=""/129, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:38:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}, [@RTA_TTL_PROPAGATE={0x8, 0x4, 0x15}]}, 0x24}}, 0x0)

10:38:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
socket$netlink(0x10, 0x3, 0x8)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {}, {r0, 0x2082}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x3408}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4093}], 0x7, 0x8)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

10:38:34 executing program 0:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x2}, 0x20)

10:38:34 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0)
lseek(r1, 0xfffffffffffffffe, 0x400000000001)

10:38:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
socket$netlink(0x10, 0x3, 0x8)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:34 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

10:38:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)=0x1)
read(r1, &(0x7f0000ec6000)=""/50, 0x32)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)

10:38:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:37 executing program 3:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r1, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(r2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:37 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x0, 0x10ffff)
pwrite64(r0, &(0x7f0000000180)='?', 0x1, 0x0)
lseek(r0, 0x0, 0x4)

10:38:37 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d000014000000000000000000000008001200000003000000000000000000060000000000000000000000000000000000abc75c0500000000000000000000ff02000000000000000000000000000105000500008000000a0000000000000003000000000008000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0)

10:38:37 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00')
write$P9_RLOCK(r0, &(0x7f0000000080)={0x8}, 0x8)

10:38:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:37 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000061100500000000009500000000000000"], 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

10:38:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="9f3db537f70de8eb789d26f461e9a6e2f91a83687ba261ea602f938ab2c4ebbeae", 0x21)

10:38:37 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x30, 0x0, 0x0)

10:38:37 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)

10:38:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:37 executing program 4:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2, 0x14, 0x0)
ftruncate(r0, 0x0)

10:38:37 executing program 3:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = getpid()
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000040))
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$cont(0xffffffffffffffff, r1, 0x10000, 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d325311"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
lgetxattr(&(0x7f0000000240)='./file1/file0\x00', &(0x7f00000002c0)=@random={'system.', 'wlan1*system\xcc(selfuser%ppp0.wlan1nodev$eth1(ppp1eth0\\\x00'}, &(0x7f0000000500)=""/227, 0xe3)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(r2, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)

10:38:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockname(r0, &(0x7f0000000200)=@xdp={0x2c, 0x0, <r1=>0x0}, &(0x7f0000000280)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x1, &(0x7f0000000040)=@raw=[@ldst], 0x0, 0xfffffffeffffffff, 0x4b, &(0x7f0000000180)=""/75, 0x41100, 0x1, [], r1, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x10000, 0x81}, 0x8, 0x10, &(0x7f0000000340)={0xffff, 0x39d63fc8, 0x77b7, 0xfffffffffffffffd}, 0x10}, 0x70)

10:38:37 executing program 4:
socketpair$unix(0x1, 0x4, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x28b87512)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

10:38:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000))

10:38:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:38 executing program 2:
socketpair(0x10, 0x802, 0x2, &(0x7f0000000040))

10:38:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:38 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00'}, 0x0)

10:38:38 executing program 4:
r0 = socket$inet6(0xa, 0x800000003, 0x1)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0xc}], 0xc}}], 0x1, 0x0)

10:38:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x25, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4, 0xe}}}]}, 0x30}}, 0x0)

10:38:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETA(r0, 0x8910, 0x0)

10:38:38 executing program 3:
timer_create(0x3, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x0, 0x0, &(0x7f00000000c0))

10:38:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)
ioctl$TCSETA(r0, 0x8910, 0x0)

10:38:38 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x80fb, 0x3})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

10:38:38 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))

10:38:38 executing program 0:
r0 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/234, 0xea}], 0x6}}], 0x1, 0x0, 0x0)

10:38:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0), 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:38 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)

10:38:38 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x80fb, 0x3})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0)
dup2(r0, r1)

10:38:38 executing program 0:
r0 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001640)=""/234, 0xea}], 0x6}}], 0x1, 0x0, 0x0)

10:38:38 executing program 3:

10:38:39 executing program 3:

10:38:39 executing program 0:

10:38:39 executing program 4:

10:38:39 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2a40)
fsetxattr$security_capability(r0, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x3, 0x7f}, {0x1000, 0x7}]}, 0x14, 0x0)

10:38:39 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

10:38:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0), 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:39 executing program 0:

10:38:39 executing program 4:

10:38:39 executing program 2:

10:38:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:39 executing program 3:

10:38:39 executing program 0:

10:38:39 executing program 2:

10:38:39 executing program 3:

10:38:39 executing program 4:

10:38:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0), 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:39 executing program 2:

10:38:39 executing program 0:

10:38:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:40 executing program 3:

10:38:40 executing program 4:

10:38:40 executing program 0:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x0)
timer_create(0x3, 0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:40 executing program 3:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00')
ioprio_set$pid(0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0)

10:38:40 executing program 2:

10:38:40 executing program 4:

[  481.673326] audit: type=1800 audit(1555929520.123:210): pid=24194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16946 res=0
10:38:40 executing program 2:

10:38:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:40 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:40 executing program 4:

10:38:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:40 executing program 0:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x0)
timer_create(0x3, 0x0, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000009104"])

[  482.369998] audit: type=1800 audit(1555929520.813:211): pid=24220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17074 res=0
10:38:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:40 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="58000000000000000000000000000000611004000000000095000000000000000807e8ce64ea00000000000000001dfc8d5f330981e51c9f76a30a504d22158e"], 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

10:38:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000080), 0xc6)
close(r1)

10:38:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:41 executing program 0:
process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x60, 0xc8)

10:38:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:41 executing program 4:
exit(0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20)

10:38:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:41 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x2}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x97, 0xede, 0x82}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x5, 0x7, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0x81, &(0x7f00000002c0)=""/129, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:38:41 executing program 3:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:41 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  483.273485] audit: type=1800 audit(1555929521.713:212): pid=24261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16802 res=0
10:38:41 executing program 0:
openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000001eb, 0x0)

10:38:41 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:41 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

10:38:41 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000014e, 0x0)

10:38:42 executing program 3:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0xfffffffffffffe94, 0x2)
timer_create(0x3, 0x0, &(0x7f00000000c0))
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000))
creat(0x0, 0x0)
fallocate(r0, 0x11, 0x0, 0xd000000)

10:38:42 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:42 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x1000, 0x6, &(0x7f0000000040)=""/6}, {0x0, 0x0, 0x0}]})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))

10:38:42 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

[  484.145682] audit: type=1800 audit(1555929522.593:213): pid=24302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=17345 res=0
10:38:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:42 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:42 executing program 0:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000080))

10:38:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:42 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0xffffffffffffff6e)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
openat$tun(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

10:38:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:43 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000002300)='/dev/input/event#\x00', 0x0, 0x0)
select(0x40, &(0x7f0000002280)={0x40}, 0x0, 0x0, &(0x7f0000002380)={0x77359400})

10:38:43 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11)
ioctl$GIO_FONT(r0, 0x4b60, 0x0)

10:38:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:43 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:43 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:43 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000e00)=ANY=[@ANYBLOB="06eb010018000000006c0000008400000000000000fe9a20"], 0x0, 0x18}, 0x20)

10:38:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:43 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0xffffffffffffff6e)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
openat$tun(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

10:38:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r1, 0x0, [0x305f, 0xa, 0x300]}, 0x2c)
ioctl(0xffffffffffffffff, 0x0, 0x0)

10:38:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

[  485.803200] binder: 24394:24398 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  485.870342] binder: 24394:24398 got reply transaction with no transaction stack
10:38:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

[  485.920930] binder: 24394:24398 transaction failed 29201/-71, size 0-0 line 2709
[  485.975725] binder: undelivered TRANSACTION_ERROR: 29201
10:38:44 executing program 0:
syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0xc803, 0x0)

10:38:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:44 executing program 0:
ioctl(0xffffffffffffffff, 0x2ab8d183, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4)
gettid()
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffffff)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x200000)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4", 0x35}], 0x1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000002600))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x3ffffffffffffffe, @empty}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000002300)='/dev/input/event#\x00', 0x0, 0x501400)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000340)=""/188)
execve(0x0, 0x0, &(0x7f0000000940)=[&(0x7f00000006c0)='\x00', &(0x7f0000000740)='{+*.ppp1bdev:\x00', &(0x7f0000000780)='cgroup\x00', &(0x7f0000002340)='/proc/self/net/pfkey\x00', 0x0, 0x0, &(0x7f00000008c0)='eth1({trusted(em0\x00', &(0x7f0000000900)='vfat\x00'])
select(0x40, &(0x7f0000002280)={0x40, 0x8, 0x57c0, 0x0, 0x8, 0x401, 0x5, 0x5}, &(0x7f00000022c0)={0x2, 0x8, 0x7, 0x6, 0x401, 0x0, 0x0, 0x6}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, 0x0)
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f)

10:38:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

[  486.234557] binder: 24431:24436 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  486.246093] binder: 24431:24436 got reply transaction with no transaction stack
[  486.307987] binder: 24431:24436 transaction failed 29201/-71, size 0-0 line 2709
[  486.326761] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[  486.357150] binder: undelivered TRANSACTION_ERROR: 29201
10:38:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:45 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:45 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x2}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x97, 0xede, 0x82}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x5, 0x9, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xfec7, &(0x7f00000002c0)=""/129}, 0x48)

10:38:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:45 executing program 0:
perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000001800)={{0x0, 0xe55}, {}, 0x0, 0x4})
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x2000000)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0)
gettid()
socket(0xa, 0x0, 0x1ff)

10:38:45 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

[  486.796556] binder: 24450:24458 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  486.850168] binder: 24450:24458 got reply transaction with no transaction stack
10:38:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:38:45 executing program 0:
ustat(0xe, &(0x7f0000000140))

[  486.892845] binder: 24450:24458 transaction failed 29201/-71, size 0-0 line 2709
[  486.930391] binder: undelivered TRANSACTION_ERROR: 29201
10:38:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c12")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:46 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

10:38:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:38:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c12")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

[  487.652787] binder: 24485:24494 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  487.681756] binder: 24485:24494 got reply transaction with no transaction stack
10:38:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:38:46 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c12")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

[  487.714373] binder: 24485:24494 transaction failed 29201/-71, size 0-0 line 2709
10:38:46 executing program 3:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(0xffffffffffffffff, 0x800455cc, 0x0)

10:38:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  487.772261] binder: undelivered TRANSACTION_ERROR: 29201
10:38:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319b")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:46 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

[  487.884273] binder: 24517:24521 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  487.913994] binder: 24517:24521 got reply transaction with no transaction stack
[  487.950716] binder: 24517:24521 transaction failed 29201/-71, size 0-0 line 2709
[  487.984202] binder: undelivered TRANSACTION_ERROR: 29201
10:38:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:46 executing program 3:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(0xffffffffffffffff, 0x800455cc, 0x0)

10:38:46 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319b")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:46 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:47 executing program 3:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(0xffffffffffffffff, 0x800455cc, 0x0)

[  488.572893] binder: 24536:24541 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319b")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:47 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  488.623250] binder: 24536:24541 got reply transaction with no transaction stack
10:38:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

[  488.678826] binder: 24536:24541 transaction failed 29201/-71, size 0-0 line 2709
10:38:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd0")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  488.732930] binder: undelivered TRANSACTION_ERROR: 29201
10:38:47 executing program 0:
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd0")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  488.836222] binder: 24566:24570 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:47 executing program 0:
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

[  488.892072] binder: 24566:24570 got reply transaction with no transaction stack
[  488.919988] binder: 24566:24570 transaction failed 29201/-71, size 0-0 line 2709
[  488.964767] binder: undelivered TRANSACTION_ERROR: 29201
10:38:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003", 0x4d}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd0")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9d89, 0x0)

10:38:47 executing program 0:
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:48 executing program 0:
mkdir(0x0, 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003", 0x4d}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  489.566216] binder: 24593:24596 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:48 executing program 0:
mkdir(0x0, 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

10:38:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

[  489.633686] binder: 24593:24596 got reply transaction with no transaction stack
10:38:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003", 0x4d}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  489.703211] binder: 24593:24596 transaction failed 29201/-71, size 0-0 line 2709
10:38:48 executing program 0:
mkdir(0x0, 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

10:38:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  489.753925] binder: undelivered TRANSACTION_ERROR: 29201
10:38:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00", 0x53}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00", 0x53}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  489.862712] binder: 24630:24636 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

10:38:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

[  489.951247] binder: 24630:24636 got reply transaction with no transaction stack
[  489.968289] binder: 24630:24636 transaction failed 29201/-71, size 0-0 line 2709
10:38:48 executing program 2:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x0, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x1}, r1, 0x2, r0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x115}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x102, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x9}, 0x40000000)

10:38:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  490.002209] binder: undelivered TRANSACTION_ERROR: 29201
10:38:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00", 0x53}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

[  490.135460] binder: 24661:24665 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004", 0x56}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:48 executing program 2:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x0, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x1}, r1, 0x2, r0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x115}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x102, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x9}, 0x40000000)

[  490.185607] binder: 24661:24665 got reply transaction with no transaction stack
10:38:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETA(r0, 0x800455cc, 0x0)

[  490.225832] binder: 24661:24665 transaction failed 29201/-71, size 0-0 line 2709
10:38:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004", 0x56}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  490.280417] binder: undelivered TRANSACTION_ERROR: 29201
10:38:48 executing program 2:
openat$cgroup(0xffffffffffffff9c, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = getpid()
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000b80)={0x4, 0x70, 0x4a, 0x81, 0x2, 0x0, 0x0, 0x80000001, 0x24020, 0x2, 0x6, 0x0, 0x9, 0x7, 0x4, 0x9, 0x4, 0x65b, 0x400, 0x8, 0x1, 0x80, 0x6, 0xfffffffffffffffe, 0x7f, 0x14d, 0x7, 0x8, 0x0, 0x651, 0xcf, 0x9a7, 0x0, 0x6, 0x8, 0xfffffffffffffffa, 0x100000000, 0x6, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x1}, r1, 0x2, r0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe05)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000006c0000008400000000000000923106be97e85c3488fd36125183c62da3fd4e83dedad84ff331f67e9aaf4a86da6cfb8e7471005c22fd1006d4acb3ac2d9ae27eab684449baffa2a2905450220a6316f4a00706939e60f51700f0511e161e5645b4858a56daabbed58928038d0c2b23ae9d49ee176899d742e162702d5934154a75357243059836b0aa1c7140ccf2cce028d842bd714ff71b40c49170b4f20213bce25081d92f2f33c56b81cff0f96abfa81714331df5f48e7741e6e0ed650994de3db667f9917c3764c751532ec9f2d248ebc5f696c4bc8ac1f7d1671072d5fcc89c990e2622e882f25b75912444233473171e0a94782c4bfaa8b8178ff8c27c1f30609ed1af7f852fe18500"], 0x0, 0x115}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x60357a5a, 0x1, 0x6, 0x9, 0x6, 0x9, 0x4, 0x0, 0xc15, 0x2, 0x5, 0xb13, 0xef, 0xf9, 0x6, 0x3, 0x2, 0x30b, 0x9, 0x7fff, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x102, 0x0, 0xffffffff, 0x2, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0xb)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0))
write$cgroup_subtree(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0700000020a5c2f1c09d9390c244e0b26d2cefa7dd70019663c8bdf116162388c00a8174e25545f93bf3ce428f8d288fb824aa"], 0x33)
recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000680)=""/187, 0xbb}, {0x0}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/248, 0xf8}], 0x9}, 0x40000000)

10:38:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:48 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000040)={{0xffffffffffffffff}})

10:38:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:49 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:38:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004", 0x56}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:49 executing program 2:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1})

10:38:49 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
ioctl$TCSETA(r0, 0x800455cc, 0x0)

10:38:49 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:38:49 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:49 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(0xffffffffffffffff, 0x800455cc, 0x0)

10:38:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000680)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@window, @window={0x3, 0x100}, @timestamp, @sack_perm], 0x4)

10:38:49 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

10:38:49 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fc", 0x57}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(0xffffffffffffffff, 0x800455cc, 0x0)

10:38:49 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:49 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout'}}]}})

10:38:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(r0, 0x5423, &(0x7f0000000080))

10:38:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fc", 0x57}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSETA(0xffffffffffffffff, 0x800455cc, 0x0)

10:38:49 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:49 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0)

10:38:50 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}, [@RTA_TTL_PROPAGATE={0x8, 0x4, 0x15}]}, 0x24}}, 0x0)

10:38:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f121c123f319bd070")
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, 0x0)

[  491.603743] 9pnet_virtio: no channels available for device 127.0.0.1
10:38:50 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:50 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0)

10:38:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f121c123f319bd070")
r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r1, &(0x7f0000002000)='/', 0x1)
sendfile(r1, r1, &(0x7f0000000040), 0x7f)
sendfile(r1, r1, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)

[  491.648461] binder: 24790:24800 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  491.689755] binder: 24790:24800 got reply transaction with no transaction stack
[  491.726661] binder: 24790:24800 transaction failed 29201/-71, size 0-0 line 2709
[  491.762297] 9pnet_virtio: no channels available for device 127.0.0.1
[  491.776344] binder: undelivered TRANSACTION_ERROR: 29201
10:38:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fc", 0x57}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00fb14a5d1104f0933"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:50 executing program 2:
syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4d7b, 0x800000000105082)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f00000ddff8), 0x10200000e)

10:38:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:50 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0)

10:38:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  492.398097] binder: 24822:24831 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  492.416454] binder: 24822:24831 got reply transaction with no transaction stack
[  492.421387] 9pnet_virtio: no channels available for device 127.0.0.1
[  492.431849] binder: 24822:24831 transaction failed 29201/-71, size 0-0 line 2709
10:38:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  492.448720] binder: undelivered TRANSACTION_ERROR: 29201
10:38:50 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}})

10:38:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:50 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xfffffffffffffffe, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x80000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1d, 0x0, 0x0, 0x0)
r0 = gettid()
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x3, 0x3f, 0x48000000000000, 0x8, 0x0, 0xa8a, 0x48000, 0x6, 0x1, 0xb9, 0x80000000, 0x10001, 0x1f, 0x0, 0x1, 0x9, 0x0, 0x200, 0x0, 0x0, 0xd5a0000, 0x0, 0x0, 0x1000, 0x7, 0x7, 0x1, 0x7fff, 0x81, 0x2, 0x0, 0x6, 0x0, 0x100000001, 0xfffffffffffffffc, 0x0, 0x0, 0xaa24, 0x4, @perf_bp={0x0, 0x4}, 0x10, 0x8, 0x7f, 0x7, 0x4, 0x1bf5, 0x87f0000000000000}, r0, 0xa, 0xffffffffffffffff, 0x2)
unlink(&(0x7f0000000000)='./file0\x00')
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12)
perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x20, 0x4, 0xcb13, 0x2, 0x0, 0x7, 0x8, 0x3, 0xb081, 0x0, 0x10bf, 0x4, 0x80, 0x0, 0x0, 0x1, 0x8, 0x1f000000000, 0x0, 0x81, 0x2, 0x7fffffff, 0x5, 0x40, 0x0, 0x6, 0x8, 0x401, 0x0, 0x4, 0x10000, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x3f10, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0xab, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xa, r1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001500)='cpuacct.usage_user\x00', 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000001540)=r0, 0x12)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401, 0x7, 0x5, 0x0, 0x5, 0x800, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x8, 0xd4, 0x6452, 0x2, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x441900, 0x0, 0x800, 0x8, 0x1f, 0x0, 0xfff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x7, 0x8001, 0x7, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0xda4fff08)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000140)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0)

10:38:51 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  492.564362] binder: 24846:24852 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
ioctl$GIO_FONT(r0, 0x540a, 0x0)

[  492.613257] binder: 24846:24852 got reply transaction with no transaction stack
10:38:51 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}})

[  492.653717] binder: 24846:24852 transaction failed 29201/-71, size 0-0 line 2709
[  492.693229] can: request_module (can-proto-0) failed.
10:38:51 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  492.706711] binder: undelivered TRANSACTION_ERROR: 29201
10:38:51 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0xfffffffffffffffe}, 0xfffffffffffffffe}, 0x5c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})

10:38:51 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=rdma,', {'port'}})

10:38:51 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  492.803409] binder: 24875:24879 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  492.844348] binder: 24875:24879 got reply transaction with no transaction stack
[  492.856436] binder: 24875:24879 transaction failed 29201/-71, size 0-0 line 2709
[  492.880831] can: request_module (can-proto-0) failed.
[  492.886560] binder: undelivered TRANSACTION_ERROR: 29201
10:38:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

10:38:51 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xfffffffffffffffe, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x80000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1d, 0x0, 0x0, 0x0)
r0 = gettid()
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x3, 0x3f, 0x48000000000000, 0x8, 0x0, 0xa8a, 0x48000, 0x6, 0x1, 0xb9, 0x80000000, 0x10001, 0x1f, 0x0, 0x1, 0x9, 0x0, 0x200, 0x0, 0x0, 0xd5a0000, 0x0, 0x0, 0x1000, 0x7, 0x7, 0x1, 0x7fff, 0x81, 0x2, 0x0, 0x6, 0x0, 0x100000001, 0xfffffffffffffffc, 0x0, 0x0, 0xaa24, 0x4, @perf_bp={0x0, 0x4}, 0x10, 0x8, 0x7f, 0x7, 0x4, 0x1bf5, 0x87f0000000000000}, r0, 0xa, 0xffffffffffffffff, 0x2)
unlink(&(0x7f0000000000)='./file0\x00')
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12)
perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x20, 0x4, 0xcb13, 0x2, 0x0, 0x7, 0x8, 0x3, 0xb081, 0x0, 0x10bf, 0x4, 0x80, 0x0, 0x0, 0x1, 0x8, 0x1f000000000, 0x0, 0x81, 0x2, 0x7fffffff, 0x5, 0x40, 0x0, 0x6, 0x8, 0x401, 0x0, 0x4, 0x10000, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x3f10, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0xab, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xa, r1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001500)='cpuacct.usage_user\x00', 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000001540)=r0, 0x12)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401, 0x7, 0x5, 0x0, 0x5, 0x800, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x8, 0xd4, 0x6452, 0x2, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x441900, 0x0, 0x800, 0x8, 0x1f, 0x0, 0xfff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x7, 0x8001, 0x7, 0x8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0xda4fff08)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000140)='./file0\x00'}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0)

10:38:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  492.970318] binder: 24892:24895 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  492.996802] binder: 24892:24895 got reply transaction with no transaction stack
[  493.021425] binder: 24892:24895 transaction failed 29201/-71, size 0-0 line 2709
[  493.034107] binder: undelivered TRANSACTION_ERROR: 29201
[  493.075982] can: request_module (can-proto-0) failed.
10:38:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f1"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  493.548555] binder: 24910:24914 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  493.556869] IPVS: ftp: loaded support on port[0] = 21
[  493.587076] binder: 24910:24914 got reply transaction with no transaction stack
10:38:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  493.599221] binder: 24910:24914 transaction failed 29201/-71, size 0-0 line 2709
[  493.639371] binder: undelivered TRANSACTION_ERROR: 29201
[  494.660271] IPVS: ftp: loaded support on port[0] = 21
10:38:53 executing program 3:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0xfffffffffffffffe}, 0xfffffffffffffffe}, 0x5c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})

10:38:53 executing program 0:

10:38:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:38:53 executing program 2:

10:38:53 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0xfffffffffffffffe}, 0xfffffffffffffffe}, 0x5c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})

10:38:53 executing program 0:

[  495.025004] binder: 24932:24937 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  495.059551] binder: 24932:24937 got reply transaction with no transaction stack
10:38:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  495.079608] binder: 24932:24937 transaction failed 29201/-71, size 0-0 line 2709
[  495.090706] binder: undelivered TRANSACTION_ERROR: 29201
10:38:53 executing program 0:

10:38:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:53 executing program 0:

[  495.147911] binder: 24948:24951 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  495.178611] binder: 24948:24951 got reply transaction with no transaction stack
[  495.229172] binder: 24948:24951 transaction failed 29201/-71, size 0-0 line 2709
[  495.281344] binder: undelivered TRANSACTION_ERROR: 29201
10:38:54 executing program 3:

10:38:54 executing program 0:

10:38:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:54 executing program 2:

10:38:54 executing program 0:

10:38:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  496.004232] binder: 24963:24967 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:54 executing program 0:

10:38:54 executing program 3:

10:38:54 executing program 2:

[  496.077995] binder: 24963:24967 got reply transaction with no transaction stack
10:38:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:54 executing program 0:

[  496.140209] binder: 24963:24967 transaction failed 29201/-71, size 0-0 line 2709
10:38:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  496.199227] binder: undelivered TRANSACTION_ERROR: 29201
10:38:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:54 executing program 3:

10:38:54 executing program 2:

10:38:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:54 executing program 0:

10:38:54 executing program 2:

10:38:54 executing program 3:

10:38:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  496.371248] binder: 24999:25001 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:54 executing program 0:

10:38:54 executing program 3:

[  496.451698] binder: 24999:25001 got reply transaction with no transaction stack
10:38:54 executing program 0:

10:38:54 executing program 2:

[  496.504821] binder: 24999:25001 transaction failed 29201/-71, size 0-0 line 2709
[  496.546978] binder: undelivered TRANSACTION_ERROR: 29201
10:38:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:55 executing program 3:

10:38:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  496.661657] binder: 25022:25025 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  496.694047] binder: 25022:25025 got reply transaction with no transaction stack
[  496.719225] binder: 25022:25025 transaction failed 29201/-71, size 0-0 line 2709
[  496.734174] binder: undelivered TRANSACTION_ERROR: 29201
10:38:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:55 executing program 0:

10:38:55 executing program 2:

10:38:55 executing program 3:

10:38:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:55 executing program 2:

10:38:55 executing program 0:

[  497.203868] binder: 25030:25036 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:55 executing program 3:

10:38:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  497.247653] binder: 25030:25036 got reply transaction with no transaction stack
10:38:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:55 executing program 2:

10:38:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0)
setresgid(0x0, 0xee00, 0x0)
setgroups(0x0, 0x0)
setresuid(0x0, 0xfffe, 0xffffffffffffffff)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffbd, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0)

[  497.302286] binder: 25030:25036 transaction failed 29201/-71, size 0-0 line 2709
10:38:55 executing program 3:

10:38:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  497.363191] binder: undelivered TRANSACTION_ERROR: 29201
10:38:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:55 executing program 2:

10:38:55 executing program 3:

10:38:55 executing program 0:

10:38:55 executing program 2:

10:38:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:56 executing program 0:

10:38:56 executing program 3:

[  497.516432] binder: 25063:25069 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  497.547489] binder: 25063:25069 got reply transaction with no transaction stack
10:38:56 executing program 2:

10:38:56 executing program 0:

10:38:56 executing program 3:

[  497.608530] binder: 25063:25069 transaction failed 29201/-71, size 0-0 line 2709
[  497.665762] binder: undelivered TRANSACTION_ERROR: 29201
10:38:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:56 executing program 2:

10:38:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:56 executing program 0:

10:38:56 executing program 3:

10:38:56 executing program 2:

[  498.274309] binder: 25090:25095 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:56 executing program 3:

10:38:56 executing program 0:

10:38:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  498.317867] binder: 25090:25095 got reply transaction with no transaction stack
[  498.327125] binder: 25090:25095 transaction failed 29201/-71, size 0-0 line 2709
10:38:56 executing program 2:

10:38:56 executing program 0:

10:38:56 executing program 3:

10:38:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  498.395481] binder: undelivered TRANSACTION_ERROR: 29201
10:38:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:56 executing program 2:

10:38:56 executing program 0:

[  498.471701] binder: 25113:25116 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:56 executing program 3:

[  498.514746] binder: 25113:25116 got reply transaction with no transaction stack
10:38:57 executing program 2:

10:38:57 executing program 0:

10:38:57 executing program 3:

10:38:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  498.557426] binder: 25113:25116 transaction failed 29201/-71, size 0-0 line 2709
[  498.589721] binder: undelivered TRANSACTION_ERROR: 29201
10:38:57 executing program 3:

10:38:57 executing program 0:

10:38:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:57 executing program 2:

10:38:57 executing program 0:

10:38:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:57 executing program 3:

10:38:57 executing program 0:

10:38:57 executing program 3:

10:38:57 executing program 2:

[  499.308432] binder: 25141:25149 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:57 executing program 0:

10:38:57 executing program 2:

[  499.363650] binder: 25141:25149 got reply transaction with no transaction stack
[  499.397676] binder: 25141:25149 transaction failed 29201/-71, size 0-0 line 2709
10:38:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  499.473712] binder: undelivered TRANSACTION_ERROR: 29201
10:38:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:58 executing program 3:

10:38:58 executing program 2:

10:38:58 executing program 0:

10:38:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:58 executing program 3:

10:38:58 executing program 0:

[  500.130242] binder: 25171:25174 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  500.161700] binder: 25171:25174 got reply transaction with no transaction stack
10:38:58 executing program 3:

10:38:58 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a, 0x80}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x4000000000004ae, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")

10:38:58 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchmod(r0, 0x0)

10:38:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  500.175235] binder: 25171:25174 transaction failed 29201/-71, size 0-0 line 2709
[  500.194560] binder: undelivered TRANSACTION_ERROR: 29201
[  500.273750] binder: 25187:25190 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  500.307176] binder: 25187:25190 got reply transaction with no transaction stack
[  500.338308] binder: 25187:25190 transaction failed 29201/-71, size 0-0 line 2709
[  500.354447] binder: undelivered TRANSACTION_ERROR: 29201
10:38:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:59 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

10:38:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:59 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/40, 0x2b8)

10:38:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:59 executing program 2:

10:38:59 executing program 2:

10:38:59 executing program 3:
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4101100ff2b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0)

10:38:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  500.961160] binder: 25200:25205 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  500.978362] binder: 25200:25205 got reply transaction with no transaction stack
10:38:59 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0)

10:38:59 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6)

10:38:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:59 executing program 3:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty, 0xa688}, {0xa, 0x4e24, 0x0, @rand_addr="a31f57d815bd3b8fc901a9349a2edb72"}, 0x0, [0x97cd, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x9]}, 0x5c)
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6)
ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)

[  501.073999] binder: 25200:25205 transaction failed 29201/-71, size 0-0 line 2709
10:38:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:38:59 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x2f1, &(0x7f0000000300)={&(0x7f00000009c0)={0x14, 0x29, 0x7, 0x0, 0x0, {0x3801}}, 0x14}}, 0x0)

[  501.129441] binder: undelivered TRANSACTION_ERROR: 29201
10:38:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:38:59 executing program 0:
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2})
sendmsg$kcm(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}, 0x20000090)
close(r3)

[  501.227821] binder: 25237:25251 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:38:59 executing program 2:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0)
pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)="b9", 0x1}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = gettid()
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

10:38:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:38:59 executing program 2:
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0)
pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)="b9", 0x1}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r2 = gettid()
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000000016)

[  501.282393] binder: 25237:25251 got reply transaction with no transaction stack
[  501.309975] binder: 25237:25251 transaction failed 29201/-71, size 0-0 line 2709
10:38:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  501.352005] binder: undelivered TRANSACTION_ERROR: 29201
10:38:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  501.449807] binder: 25272:25275 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  501.478053] binder: 25272:25275 got reply transaction with no transaction stack
10:39:00 executing program 4:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:39:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x12)

[  501.506412] binder: 25272:25275 transaction failed 29201/-71, size 0-0 line 2709
[  501.531652] binder: undelivered TRANSACTION_ERROR: 29201
10:39:00 executing program 3:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty, 0xa688}, {0xa, 0x4e24, 0x0, @rand_addr="a31f57d815bd3b8fc901a9349a2edb72"}, 0x0, [0x97cd, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x9]}, 0x5c)
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$unix(r1, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6)
ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)

10:39:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:00 executing program 2:
r0 = socket$kcm(0x2b, 0x200000000000001, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054)

10:39:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:00 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070")
dup3(r2, r0, 0x0)

10:39:00 executing program 4:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:39:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x12)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:39:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:00 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x2000000000000005, 0x97, 0xede, 0x82, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x20}, 0x3c)
recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")

10:39:00 executing program 4:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:39:00 executing program 2:
r0 = socket$inet(0x10, 0x2000000003, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)

10:39:00 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000440)=@ipv4_delroute={0x1c}, 0x1c}}, 0x0)

10:39:00 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0xfd86)

10:39:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

10:39:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  502.315316] binder: 25333:25338 ioctl c0306201 0 returned -14
10:39:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0xfffff)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000240)={0x0, 0x20000000002, 0x0, 0x40})
lseek(r1, 0x0, 0x800000000000002)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

10:39:01 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
mknod$loop(0x0, 0x2, 0xffffffffffffffff)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0xfffff)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x26880, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x40})
lseek(r1, 0x0, 0x800000000000002)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000c80)='./bus\x00', 0x0)

10:39:01 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0xe)
fcntl$setstatus(r0, 0x4, 0x42803)

10:39:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

10:39:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:01 executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x19)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x19)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local, 0x0, 0x2, [@local, @multicast1]}, 0x18)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)

[  502.900075] audit: type=1804 audit(1555929541.343:214): pid=25349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir344420489/syzkaller.5KjoSH/811/bus" dev="sda1" ino=16695 res=1
10:39:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  502.956914] binder: 25346:25354 ioctl c0306201 0 returned -14
10:39:01 executing program 0:
clone(0x10000000000fff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1004, 0x200)
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)=0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ptrace(0x10, r0)
tkill(r0, 0x39)

[  503.005005] audit: type=1800 audit(1555929541.353:215): pid=25349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16695 res=0
10:39:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

10:39:01 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x841, 0x0, &(0x7f00000002c0))

10:39:01 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x80000000, 0x101})

10:39:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  503.122063] binder: 25372:25378 ioctl c0306201 0 returned -14
10:39:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  503.167955] audit: type=1804 audit(1555929541.403:216): pid=25358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir344420489/syzkaller.5KjoSH/811/bus" dev="sda1" ino=16695 res=1
[  503.285059] audit: type=1804 audit(1555929541.433:217): pid=25349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir344420489/syzkaller.5KjoSH/811/bus" dev="sda1" ino=16695 res=1
10:39:01 executing program 3:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f000080b000/0xe000)=nil, 0xe000, 0x0, 0x0, 0x0)

10:39:01 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)
ptrace(0x18, r0)
tkill(r0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000a80)=[{0x0}], 0x1)

10:39:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:01 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0xffffffffffffffcf)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0)
fcntl$getown(r1, 0x9)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000016c0)={0x2, 0x4e23, @loopback}, 0x10)
write$binfmt_aout(r0, &(0x7f00000001c0), 0xfffffffffffffdf9)
shutdown(r0, 0x800000000000001)
socket(0xd, 0x3, 0x401)
recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001400)=""/87, 0x57}, {&(0x7f0000000180)=""/40, 0x28}], 0x2, &(0x7f0000001480)=""/252, 0xfc}, 0x40010001)
pipe(&(0x7f00000015c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fadvise64(r0, 0x0, 0x800, 0x3)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000001600)=[0x7])
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in6}}, {{@in=@multicast1}}}, &(0x7f0000000040)=0xe8)
write$P9_RMKNOD(r2, &(0x7f0000001680)={0x14, 0x13, 0x1, {0x4, 0x4, 0x8}}, 0x14)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x100)

10:39:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:39:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  503.348146] audit: type=1800 audit(1555929541.433:218): pid=25349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=16695 res=0
10:39:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  503.390370] audit: type=1804 audit(1555929541.433:219): pid=25358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir344420489/syzkaller.5KjoSH/811/bus" dev="sda1" ino=16695 res=1
10:39:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:01 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)
ptrace(0x18, r0)
tkill(r0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000a80)=[{0x0}], 0x1)

10:39:01 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x49249249249282a})

10:39:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:02 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/277], 0x115)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000003e00000000000000000000000000400000000000000000000000000000000000000005003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f95c9d0ec9fb42d92d471cbe500"], 0x341)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000700)=""/132, 0x84}, {0x0}], 0x3}, 0x0)
sendto$inet(r0, &(0x7f0000000f40)="03f4a2c970de1d9c3776a9481255ced5dbc57fe63cd931916a02bae17f7850aea473b1c2395dcc0f572febcadeb7fa0f2ee9dc78ccc69169ccfc0bf46dbaba25f3f5a75b77654c0cb9989ea026da080991348232bc2541328a29ec7e06942980144d2ae1b8811ef7af232c4bcb7d89d1aafda6e27d68ed8047debe4f6acdb39851142538045af7a37276d45101a908acd7e6586aaa477a1e", 0x98, 0x3, 0x0, 0x0)

10:39:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0})

10:39:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:02 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)
ptrace(0x18, r0)
tkill(r0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000a80)=[{0x0}], 0x1)

10:39:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:02 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r4, 0x2081fc)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)
fcntl$setstatus(r3, 0x4, 0x6100)
fdatasync(r2)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2})

[  503.635638] binder: 25433:25439 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:39:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:02 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/277], 0x115)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000003e00000000000000000000000000400000000000000000000000000000000000000005003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f95c9d0ec9fb42d92d471cbe500"/936], 0x3a8)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000700)=""/132, 0x84}, {0x0}], 0x3}, 0x140)
sendto$inet(r0, &(0x7f0000000f40)="03f4a2c970de1d9c3776a9481255ced5dbc57fe63cd931916a02bae17f7850aea473b1c2395dcc0f572febcadeb7fa0f2ee9dc78ccc69169ccfc0bf46dbaba25f3f5a75b77654c0cb9989ea026da080991348232bc2541328a29ec7e06942980144d2ae1b8811ef7af232c4bcb7d89d1aafda6e27d68ed8047debe4f6acdb39851142538045af7a37276d45101a908acd7e6586aaa477a1ed7", 0x99, 0x3, 0x0, 0x0)

10:39:02 executing program 2:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ppoll(&(0x7f0000000100)=[{r0, 0x19}], 0x1, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f00000000c0), 0x8)

10:39:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0})

10:39:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:02 executing program 2:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ppoll(&(0x7f0000000100)=[{r0, 0x19}], 0x1, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f00000000c0), 0x8)

10:39:02 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/277], 0x115)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000003e00000000000000000000000000400000000000000000000000000000000000000005003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f95c9d0ec9fb42d92d471cbe500"/936], 0x3a8)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000700)=""/132, 0x84}, {0x0}], 0x3}, 0x140)
sendto$inet(r0, &(0x7f0000000f40)="03f4a2c970de1d9c3776a9481255ced5dbc57fe63cd931916a02bae17f7850aea473b1c2395dcc0f572febcadeb7fa0f2ee9dc78ccc69169ccfc0bf46dbaba25f3f5a75b77654c0cb9989ea026da080991348232bc2541328a29ec7e06942980144d2ae1b8811ef7af232c4bcb7d89d1aafda6e27d68ed8047debe4f6acdb39851142538045af7a37276d45101a908acd7e6586aaa477a1ed7", 0x99, 0x3, 0x0, 0x0)

10:39:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0})

[  503.818952] binder: 25458:25466 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:39:02 executing program 2:
syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "123523", 0x44, 0x3c, 0x0, @empty, @empty, {[], @gre}}}}}, 0x0)

[  503.924150] binder: 25481:25483 BC_DEAD_BINDER_DONE 0000000000000000 not found
10:39:05 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)
ptrace(0x18, r0)
tkill(r0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000a80)=[{0x0}], 0x1)

10:39:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:05 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f450000000300000002000000f80100000000000040000000000000008800000000000000f1d70000000038000200c8030180070057e5746406000000010000080000000008000000000000000080000000000001060000eea0b615b167d11f9e37c158779d90f8ffffff00ff070000000000001c9d5b020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/201], 0xc9)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000003e00000000000000000000000000400000000000000000000000000000000000000005003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f95c9d0ec9fb42d92d471cbe500"/936], 0x3a8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000700)=""/132, 0x84}], 0x2, &(0x7f0000000b80)=""/71, 0x47}, 0x0)
sendto$inet(r0, &(0x7f0000000f40)="03", 0x1, 0x3, 0x0, 0x0)

10:39:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:39:05 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340))

10:39:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:05 executing program 3:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)
write$binfmt_elf64(r0, &(0x7f0000000740)=ANY=[], 0xfffffffffffffcea)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

[  506.657805] binder: 25497:25500 got reply transaction with no transaction stack
10:39:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x0, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:05 executing program 2:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x1)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
tkill(r0, 0x1c)
writev(r1, &(0x7f0000000a80)=[{&(0x7f00000001c0)="c6", 0x1}], 0x1)

[  506.700949] binder: 25497:25500 transaction failed 29201/-71, size 0-0 line 2709
[  506.735539] binder: undelivered TRANSACTION_ERROR: 29201
10:39:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:39:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:05 executing program 2:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000040), 0x7f)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)

[  506.834947] binder: 25524:25531 got reply transaction with no transaction stack
[  506.879488] binder: 25524:25531 transaction failed 29201/-71, size 0-0 line 2709
[  506.908062] binder: undelivered TRANSACTION_ERROR: 29201
10:39:08 executing program 2:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000040), 0x7f)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)

10:39:08 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)
ptrace(0x18, r0)
tkill(r0, 0x0)

10:39:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10:39:08 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f00000001c0), 0x12)
openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da8020000100000, 0x500001c)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
close(r1)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/118)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
socketpair(0x42a1d4651aacd063, 0xa, 0x69da, &(0x7f0000000280))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)

10:39:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x0, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:08 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000810000000000fd908488d8dd2dfaa833"], 0x12)

[  509.690480] binder: 25543:25547 got reply transaction with no transaction stack
[  509.729622] binder: 25543:25547 transaction failed 29201/-71, size 0-0 line 2709
10:39:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000810000000000fd908488d8dd2dfaa833"], 0x12)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:39:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  509.745370] binder: undelivered TRANSACTION_ERROR: 29201
[  509.852837] device nr0
 entered promiscuous mode
10:39:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  509.875301] audit: type=1804 audit(1555929548.323:220): pid=25558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir181741326/syzkaller.PJPFkN/936/memory.events" dev="sda1" ino=18609 res=1
[  509.914928] device nr0
 entered promiscuous mode
10:39:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  509.949698] device nr0
 entered promiscuous mode
10:39:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000810000000000fd908488d8dd2dfaa833"], 0x12)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:39:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  510.171548] device nr0
 entered promiscuous mode
[  510.322228] audit: type=1804 audit(1555929548.773:221): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir181741326/syzkaller.PJPFkN/936/memory.events" dev="sda1" ino=18609 res=1
10:39:11 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)
ptrace(0x18, r0)
tkill(r0, 0x0)

10:39:11 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000810000000000fd908488d8dd2dfaa833"], 0x12)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:39:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:11 executing program 4:
r0 = perf_event_open(&(0x7f0000001a40)={0x3, 0x70, 0x0, 0x20, 0x8, 0x2, 0x0, 0x200, 0x100, 0xf, 0x1, 0x4, 0x1, 0x4, 0x1, 0x8, 0x0, 0x3ff, 0x1, 0x100000001, 0x1, 0x1, 0x0, 0x4, 0x80000000, 0x2, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1000, 0x0, 0x1a, 0x85, 0x6, 0x2, 0x10000, 0x0, 0x4, 0x2, @perf_config_ext={0x1}, 0x10000, 0x0, 0x0, 0xb, 0x3c, 0x8, 0xfff}, 0x0, 0x3, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4)
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
openat$cgroup_int(r1, &(0x7f0000001ac0)='memory.max\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="230000003100817491bc655067d7aee4050c00130f00010000000000000000008b1832", 0x23}], 0x1}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000580)="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", 0x0}, 0x18)
sendmsg(0xffffffffffffffff, 0x0, 0x80000040)
openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
gettid()
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x10000, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000001940))

10:39:11 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f00000001c0), 0x12)
openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x2da8020000100000, 0x500001c)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
close(r1)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/118)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
socketpair(0x42a1d4651aacd063, 0xa, 0x69da, &(0x7f0000000280))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)

10:39:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x0, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:11 executing program 4:
r0 = perf_event_open(&(0x7f0000001a40)={0x3, 0x70, 0x0, 0x20, 0x8, 0x2, 0x0, 0x200, 0x100, 0xf, 0x1, 0x4, 0x1, 0x4, 0x1, 0x8, 0x0, 0x3ff, 0x1, 0x100000001, 0x1, 0x1, 0x0, 0x4, 0x80000000, 0x2, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1000, 0x0, 0x1a, 0x85, 0x6, 0x2, 0x10000, 0x0, 0x4, 0x2, @perf_config_ext={0x1}, 0x10000, 0x0, 0x0, 0xb, 0x3c, 0x8, 0xfff}, 0x0, 0x3, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4)
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
openat$cgroup_int(r1, &(0x7f0000001ac0)='memory.max\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="230000003100817491bc655067d7aee4050c00130f00010000000000000000008b1832", 0x23}], 0x1}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000580)="81cd6f0a2e3266d5e9ff7b52b95a2c45bf1f754c9ddc14fe4327f62c79c58f4d22e4b6a4c89155b64ec0335f56a15af7886ea7bd28bff245376f5835e93a81d5a0718eac6e128e18e7cea0c4512c4a9b03da9ab397661462592f867906675c2316694d85b50b6bdb53e29b27aaff59b8f6cceacbd9b7f12327e596c7092341ddc028089de8f9c543ed8ad7ac1ac39d94a969114adbec2f5e86c66a4b9e480299990964ab4f9a4636f9b4a905628584ab0c3bb22e34682325b438aeeb98509536e9d76ba9a1aa5926699e5bdfcb8eb2d36447d2479b40d6cb7ef0dace476a9fa9e3c06bc8ca4c610c3b05a5373ebefa0d651f0f12d08f3b2107c7c81724b3fa1ec01fba676246dcd04e2263daebf1f7a0f95652a01a6fc115ce1651bae99a1240e98ae4c3525d8aa19711cbfbd3a5274694ed257cabff79c261d784056bfc66bde4bb936aedbcd3c44440acb19806b0273aaec4df2e5614b5b9f8e87191847e5f9023fe89e4f01e777b3d0c48320cd51cb5ce6ee57204e498d455907e59c76414ceb82f1a1e13f4cf3b345790c28002dfd3767a7b64b35b9988448729972f138b5af89e723181e5e21e120d0588dbb67ce9ed08e07e131c77ddee2b40b0b784dffcc51ec09b99d439427f33b524d2527363d557ea8df45946eaffc667c210f2a7b90ec3c08e27131326cd3df609331bdf0a2964328a3e6e03aa2c11881b1c252eab6e5546ee43c7e69099b808654b77bbd88474476db867e912369ac19887f35a9819b906c21a1ab0b6b24e4792dffb058df252fc833fc2901eeec0ed9743e73e975aeee84fc64f1c08e975cadf6f79eff15aa52a6927d3dbe8817af1bae40931f5a9b8f211942bfeb5344aa1ccbdca3d7f06709b66f9ef629f726a850dc259f7016b733776c8bb325808b4e720b4beed83767657da10592b3f936a41ca4455a3516122e98ef2cc42672908d855e1cb1665f5ac35d945e33f12a48c136de4ffcde63673beece9ef70597916d53f096f7aabe790f7778cbcfc1ed9473cd966af139b6b7240e4523846d0c1ace12b5fa49c10ca599eacbe869ad99019dc3f0bcdb5e86fd4b3ccd17567b75431730e9fc8316a5e9c89ae11697b1f3e855159fb826192442e16f1c7ded1886d1566504b5b57a26a60544699e599a0908096b23288dfc5f8ba1c48e54bfd96c326ffac92514c5ea76cbe788be756e4d1019a7ed98e3a0eabc2087046f822fd4b5b66e3b2840288474ad362d3a9f91406ef333bdefdb4c863c9c2f8f19a87746b6d3d2b3508ede527e71f37f08a1c0adc0d1fe38771a3a817e16413add59d6ceb4502487a6c8f511640503fa2a8853a4f9a995dd4405b3a637f9025f7bd5e7d1fedbf1f4300b49c551be6c2d082c4c5e9f86f9da41e3e32db01ae0b6c5cf73176690abcdc46838916e6d7f33febc08b57eb43103eeaff95ae3c8a1f92a1a4ade796a1b8f687b6a3f14f53c7e9485356e394e22a927fc4f6881f3823834babfa52f4a923ac6ee536e92fbb0a4a0dc8d04fd5d87743f21466652aef7c5aac0c66dd8789c9ce129308292a455bb6e8f62aa74c411cd1c1fcbbb3ed5b023f7278f09cd966e6f59467be83f330c0d82f0a58980df4eed70c1c1b414d0ded7d8360ac634e821237e38aa61a5f4d02ba82b9753558058113739f48d31037e5860c92067fa7ed8f5d7663fd4d414b8be788bd1ee7ddffe751ac61390a0952e56aa15db985f167562811c061aaffe689155a5dd0e7a5fa81783b02200f8d92ae7e03dacc7ad018235c91a1b5a933dbbf65989c8b9bb7344e118097e5abff75c9bf8253e994304024db5450f441e315d003d1b3493afa0485b7c46eed16af3c3db659a1cc6cb9d4ec9a0c2bac878097c5e0806984418ece0fd3c00a51a829140e4391dd8a7d3000381cdf03debf03d6ae02f4869d7fbac7959783fa02ddddf716d01ea04b5c1b5be0e4032b5b573d9c6d6bbb91b775ed3362685626acec99e4f79faab8776eff5d3f492faf877c9694a6d31624f02cf900b59b16a9826036a8334db8187d9c340498d260d146b49289c3cdddf063071a25c61e97850fc056b291830986087a4dc0b16b5334a984dd6b268f64b564a9b82c4554dcda232b6df8d7249ccec83e24d03089662029082ec482389a0db7da99b49f95ff3ab9970d478994020487d19effafbba1d1ad26fc3e187245bda3842d8e1565378eb474d1090d8d624ed237f91a47866c60c308fd720dbf7a1f8bc4dc56780ad93f06ad368b0321d8b1dfee4b4aaa55564920387f1d54fa041c3576c0413f231b74b11b4a236950a7a26d332172be1d4d26ec5230a4e15e247483df3e46ed60a9fab47a8f611fb817b6e3ab1e11e0d14e8c10dba8a42e04687b074d4777a0325e9514b16c12ee53df7d0178b6c3cfc72f1fd3ada6925f1b44e3c0cadd50d659cf1b85341095c93545cd8c3d6e001b5b85550802f0168ac18e621f156f3b97be886f75f791cbe9aaef1019b22bcb6329df83f483796fb35ade12032044a6e4a329aff43940144a8fcba08d5fc7291116f9fd88fae2992e115221eb64d085505b1ddbdcb778e1a9b9cfff4294ec84b726259939b35a5b1e67eb333677327a9382888d70509babf0119a47995cdd00b20aac8ee83989f6f09cbd634c97229a5c2bed3bf520ad49ddd64eeeb066b6e51d947410b595301a273a03f1dc6838a629828b3a3d9b8e6e5b3a00f0e03cb32be1fa8b5582341255419f219cf8717a2ee4a0db9f353af0b6e7c0e2f3f8374e7f9380353c5518881b15e3d97cfcbc3f4b5a52c231fcb1a5bc637dbb8f3fdc25be35d9842b72c3d07d0184c6fd427a71d06872823142a2e7e7b5347906d01f73ae85c66d0fec0c8b389e00cedf3d12b3e1677ad361e32b2bacbd6c735bae3825dc794475706486c204e2277f2fa8a7858e47a99c09bddeac731d38985a9c392482f0a48fc65fb9239e700d6e34a8fac132d9930149c4a6ac3280ba35b3725b486204f9a3b2959e141ee48b1f522233117d95b1446525f680128bf3a14535ea96d156fdfd9b61f15fc5bb2293f172def5cb4a54232884879e3da88989d628d582802d96e24e433a0e9b2dd65a8cb5bd922c35ba3a9202b8c016771950018b43bc25843beafcd7b55744b1ebdc1869b9798da3aef4e7579f3cf26bbd8547b01d2efd69a879ae832d55861b87f23f6e7d22121eded338a60224f035183aaaa9618b52a2b7ff920dea4616ec1eb08153179614e1e35c81c1581f7a8b7e7dd058f4d583a89699a60f89bd8ac8014f33258b88fb36495ffba4741b8b3927f50c6d16a7a0e9cdfea50baef43634ab9ab7700b74bc41791405bef1850c495f1e87e7d4c6255bb816f5cc3d15608c5ecd39d4b6012d052da897ebd5b35fadaf2cacb1e95c23948faecc60088faf23dd158ca90670e72c73d9d952dad2087e8b21d5865e63acf270ed5cdcdfe3bda493bcc04e5a501502b523529fdfe6ffadc71ef3e893bd4536e24822cb8cafb0b2357d9d99adde18507176e01d85fe351affd98d7f209e962217bfaa7c88ba632d6fae61afe9c45880f4e3b74a119bb1c11b78d27b22a8030daa33556db857669057b5321c238f70f37e5734ccfea12dd6cf11a8b8a1972994161fb29a4a73355d64fb798c974030d66ac89557b446210884918e0f4a4abed5ba74d2be75f11c1000253786dfe710136bff4047f395aa6baeb16bd6e4baf983ae8900114a29230c173f5b9a9ab52e9f2f1afa20f8ead3cc00ba7b71f9937b717b9d0c1eaed995872cdfd4543677a4cc30986caa0c7bace7bb38b1c6ce88618cbc3a389375794316edbfcad047913c40f4bab20288116378da472e1b97bc540fa668b9f1b4fdca8bcc194027fa1053f67a486e194c9e3aa4537ab2872f7f35164d0cd8d17c4ab957adf14c6c75ece9eb453f44321bc662edb645d7373269f1ee624327f158adc8881ba72d900d4edebd473c360e2dcece80e1584076d84814abdd7b2fea24425319b3e87a61322f3ad889fd7751d63cdef2e2acac97ba95a9d84f184bc2ad3b61a8fac3000c325d689ca8f31ad5e36626354aabce99113189c812fe0c2b8d0982c81c2f04826cf89cdce0304a5931c4b4a289e79750701e5dc439d52984de83b2d41b34df07faf5c9c4d17742813a3a13bd7c384cebfcd76171cbd5a41a9f43b0578273a9bd3a8bc9daa1c2f8291882c2a23575a69e976decf457e986f018e89ec245141be51cc4c281b83d538fa413ab7ab778cb29841da5e2a547a876a8fcc218b9e024b8f817aca8ef265fb3a485c944798378abcf21df59d8a11b2315d96bf6a977943187486ca712b5e306d7585a90a60f90c04d5285c1066a08c2bdde8003fd7ef1ee55f1998521bd98b4e8595d52f340689a00c8515297347a000b3a694da1435b955c12159dbc06625d5e5ffc7d21cd3e22b5356a12d0fe60d22d49f77deb7dc7f1298124071f47cb0accbbdf52d9c4e8a619958db3fc92cb95cd6621189d03732f90a0f4c88dce2ddecb008b3765aa442a51b8ca8438a435b872564a14e2b4bf2bd20debcc700c1c97b049af5e08ed498d78340e7863a1d442523c8fd9e2910f4154c50c1b0f520a7fdaebb59e7cc185157997363e1fc55b02693a9bd8598ccc02a128ead57a11f1b5f255e47e506ba6f24159a468e228bad52ce79cb6044353c03c0c62d3148ba4a4347851453dd8922ceedb57120fcba79704a2e426aae6368ad1a049000a74835461f882d47eb006216d8a08e692fa8f14ffa2b10b4440acdd86e9b39692dc6695c66e272093787a8efe4d0178e0e3f8bb0a26e717254e5d4c7194f3b14f060d8da1fcc9d8d62cf3a03a3d2c02824f31ef4d1fd5923b53261ad5546e17b074e3a1d1ac5803c4499b2ec4397944e0d891da192da986fa66b77688ba5573785379191e998c94bfb04dd15d5cd5fdca7d37aaa03212cb8e0d70b6861410eea9aefb050607de18c17ae17f5fb28a45f139d7e9028dc0d1d25cc8800a435c07b56146953c7cf71711a578c9da029ab5ab1f2b91f8a2ad66f1fa29e07d0a33452ada52d257ef8ad12caae2eb2d2901babc9b7bbd8cd23b975a58beaef0b05c1050635a4cabb01c9c9f7610baa87782ef47b3eb2c5124103cb4a269fe391933f70df2ad349ac8e72a8ebceb7cff65438c38adff7b6f3164d19728aa02d66bf5132ec4ead01365b78e26b50faa9ff656f91b57c9cb6b2100c757c81a4892d3c34ec01b031a49aa72c8d3a3ee26e327a6054b2b74efdb3bf9fa4720def741dad6354a4335f03a16aaca5439886dacf2cd2572d825a6631517771187a276538164f545958804658085eb9076b3894c13c70d807443c86b271f7c1c34a97120537a17141e17a2e98dc5267b16871a38d4c794abeb1ab9ec8791d9ccd0d14bd6c5cf0bc1c8b6dbdaa801b6543b88a2158c8396e7fe1da50fe6c86d633bec37b03a45100cc61a56a94271b859df6d384626ef7cd5ab65c386468875286c78b1e3924cfd003968dd8135a261a85a95aa57de821520c7c7da1b367feb6ee27c288862385717dc5234f4c177a1aa295498dd2e7d04dfd55bee72f88c62745d40e14be9f6606e9fac2bc3eef57e775dea87d39aba5649503002bcfab5b6088081741096be38e2b1c13a5e035c8d73c2afdd454253b71843fe4016212ed019b186fa019fa41c2c7f", 0x0}, 0x18)
sendmsg(0xffffffffffffffff, 0x0, 0x80000040)
openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
gettid()
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x10000, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000001940))

[  512.713546] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'.
10:39:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x0, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

[  512.781191] device nr0
 entered promiscuous mode
10:39:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  512.823028] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'.
10:39:11 executing program 2:
r0 = perf_event_open(&(0x7f0000001a40)={0x3, 0x70, 0x0, 0x20, 0x8, 0x2, 0x0, 0x200, 0x100, 0xf, 0x1, 0x4, 0x1, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x100000001, 0x1, 0x1, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1000, 0x2a2b, 0x1a, 0x0, 0x6, 0x2, 0x10000, 0x0, 0x4, 0x2, @perf_config_ext={0x1}, 0x10000, 0x200, 0x0, 0xb, 0x3c, 0x8, 0xfff}, 0x0, 0x3, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4)
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0)
openat$cgroup_int(r1, &(0x7f0000001ac0)='memory.max\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="230000003100817491bc655067d7aee4050c00130f00010000000000000000008b1832", 0x23}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
sendmsg(0xffffffffffffffff, 0x0, 0x80000040)
openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
gettid()
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x10000, 0x0)
recvmsg$kcm(r4, &(0x7f0000001900)={&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000001580)=""/170, 0xaa}, {&(0x7f0000001640)=""/200, 0xc8}], 0x3, &(0x7f0000001800)=""/246, 0xf6}, 0x2000)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000001940))

[  512.849264] audit: type=1804 audit(1555929551.293:222): pid=25600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir181741326/syzkaller.PJPFkN/937/memory.events" dev="sda1" ino=16881 res=1
10:39:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x0, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:11 executing program 4:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x40000000000002, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000003040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0xffffffffffffff25, &(0x7f0000003100), 0x0, &(0x7f0000003140)=""/29, 0x1d}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x218, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11, 0xfffffffffffffffa}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000100)=0xf7, 0x12)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001040)={0xffffffffffffffff, 0x0, &(0x7f00000011c0)=""/76}, 0x18)
write$cgroup_int(0xffffffffffffffff, 0x0, 0xfffffffffffffd8c)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff}, 0x2c)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000012c0)=[{0x0}], 0x1}, 0x40)
openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x40000f, 0x0, 0x0, 0x0)
socketpair(0x11, 0x800, 0x6, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080))

[  512.973936] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'.
[  513.010933] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor.4'.
[  513.038677] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor.4'.
[  513.061438] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor.4'.
[  513.115962] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'.
10:39:14 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)
ptrace(0x18, r0)

10:39:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x0, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:14 executing program 2:
r0 = perf_event_open(&(0x7f0000001a40)={0x3, 0x70, 0x0, 0x20, 0x8, 0x2, 0x0, 0x200, 0x100, 0xf, 0x1, 0x4, 0x1, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x100000001, 0x1, 0x1, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1000, 0x2a2b, 0x1a, 0x0, 0x6, 0x2, 0x10000, 0x0, 0x4, 0x2, @perf_config_ext={0x1}, 0x10000, 0x200, 0x0, 0xb, 0x3c, 0x8, 0xfff}, 0x0, 0x3, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4)
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0)
openat$cgroup_int(r1, &(0x7f0000001ac0)='memory.max\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="230000003100817491bc655067d7aee4050c00130f00010000000000000000008b1832", 0x23}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
sendmsg(0xffffffffffffffff, 0x0, 0x80000040)
openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
gettid()
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x10000, 0x0)
recvmsg$kcm(r4, &(0x7f0000001900)={&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000001580)=""/170, 0xaa}, {&(0x7f0000001640)=""/200, 0xc8}], 0x3, &(0x7f0000001800)=""/246, 0xf6}, 0x2000)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000001940))

10:39:14 executing program 4:
r0 = perf_event_open(&(0x7f0000001a40)={0x3, 0x70, 0x0, 0x20, 0x8, 0x2, 0x0, 0x200, 0x100, 0xf, 0x1, 0x4, 0x1, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x100000001, 0x1, 0x1, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1000, 0x2a2b, 0x1a, 0x0, 0x6, 0x2, 0x10000, 0x0, 0x4, 0x2, @perf_config_ext={0x1}, 0x10000, 0x200, 0x0, 0xb, 0x3c, 0x8, 0xfff}, 0x0, 0x3, 0xffffffffffffff9c, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4)
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000019c0)='syz0\x00', 0x200002, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0)
openat$cgroup_int(r1, &(0x7f0000001ac0)='memory.max\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="230000003100817491bc655067d7aee4050c00130f00010000000000000000008b1832", 0x23}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
sendmsg(0xffffffffffffffff, 0x0, 0x80000040)
openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
gettid()
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x10000, 0x0)
recvmsg$kcm(r4, &(0x7f0000001900)={&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000001580)=""/170, 0xaa}, {&(0x7f0000001640)=""/200, 0xc8}], 0x3, &(0x7f0000001800)=""/246, 0xf6}, 0x2000)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000001940))

10:39:14 executing program 3:

10:39:14 executing program 3:

10:39:14 executing program 3:

[  515.747725] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'.
[  515.777512] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'.
10:39:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(0xffffffffffffffff, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:14 executing program 4:

10:39:14 executing program 3:

10:39:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:17 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(0xffffffffffffffff, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:17 executing program 2:

10:39:17 executing program 4:

10:39:17 executing program 3:

10:39:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(0xffffffffffffffff, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:17 executing program 3:

10:39:17 executing program 4:

10:39:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:17 executing program 2:

10:39:17 executing program 3:

10:39:20 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
tkill(r0, 0x2c)

10:39:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:20 executing program 4:

10:39:20 executing program 3:

10:39:20 executing program 2:

10:39:20 executing program 3:

10:39:20 executing program 4:

10:39:20 executing program 2:

10:39:20 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
tkill(r0, 0x2c)

10:39:20 executing program 4:

10:39:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:20 executing program 2:

10:39:20 executing program 3:

10:39:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:21 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
tkill(r0, 0x2c)

10:39:21 executing program 2:

10:39:21 executing program 3:

10:39:21 executing program 4:

10:39:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:21 executing program 4:

10:39:21 executing program 2:

10:39:21 executing program 3:

10:39:21 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:21 executing program 2:

10:39:21 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:21 executing program 4:

10:39:21 executing program 3:

10:39:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f1"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:21 executing program 2:

10:39:21 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:21 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pause()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x2c)

10:39:21 executing program 3:

10:39:21 executing program 4:

10:39:21 executing program 2:

10:39:22 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pause()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x2c)

10:39:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f1"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:22 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pause()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x2c)

10:39:22 executing program 4:

10:39:22 executing program 2:

10:39:22 executing program 3:

10:39:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f1"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:22 executing program 3:

10:39:22 executing program 0:
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:22 executing program 3:

10:39:22 executing program 4:

10:39:22 executing program 2:

10:39:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x80003)

10:39:22 executing program 3:

10:39:22 executing program 4:

10:39:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:22 executing program 2:

10:39:22 executing program 4:

10:39:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80003)

10:39:22 executing program 3:

10:39:22 executing program 0:
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:22 executing program 2:

10:39:22 executing program 3:

10:39:22 executing program 4:

10:39:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:22 executing program 2:

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80003)

10:39:23 executing program 3:

10:39:23 executing program 0:
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 4:

10:39:23 executing program 2:

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80003)

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x80003)

10:39:23 executing program 3:

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x80003)

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x80003)

10:39:23 executing program 2:

10:39:23 executing program 3:

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 2:

10:39:23 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 3:

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x0)

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 3:

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x0)

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syncfs(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x6, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3)
sendto$inet(r1, 0x0, 0x220, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0xfe1e)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000040)=0x9, 0x4)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r2)
r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {r2}, {r0, 0x2082}, {r3, 0x2000}, {r4, 0x3408}, {r4, 0x4000}, {r2, 0x4093}], 0x7, 0x8)
pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
r5 = socket$netlink(0x10, 0x3, 0x8)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e00000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TIOCSCTTY(r2, 0x540e, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
read(r4, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r3, 0x4, 0x0)
sendfile(r3, r4, 0x0, 0x0)

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 3:

10:39:23 executing program 2:

10:39:23 executing program 1:

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 4:

10:39:23 executing program 3:

10:39:23 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 4:

10:39:23 executing program 1:

10:39:23 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 4:

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 1:

10:39:23 executing program 3:

10:39:23 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 2:

10:39:23 executing program 3:

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 4:

10:39:23 executing program 1:

10:39:23 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 2:

10:39:23 executing program 4:

10:39:23 executing program 1:

10:39:23 executing program 3:

10:39:23 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r0, 0x2c)

10:39:23 executing program 2:

10:39:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:23 executing program 3:

10:39:24 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x2c)

10:39:24 executing program 4:

10:39:24 executing program 1:

10:39:24 executing program 2:

10:39:24 executing program 3:

10:39:24 executing program 4:

10:39:24 executing program 1:

10:39:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:24 executing program 2:

10:39:24 executing program 4:

10:39:24 executing program 1:

10:39:24 executing program 3:

10:39:27 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x2c)

10:39:27 executing program 2:

10:39:27 executing program 1:

10:39:27 executing program 4:

10:39:27 executing program 3:

10:39:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:27 executing program 1:

10:39:27 executing program 4:

10:39:27 executing program 2:

10:39:27 executing program 3:

10:39:27 executing program 4:

10:39:27 executing program 1:

10:39:30 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(0x0, 0x2c)

10:39:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:30 executing program 2:

10:39:30 executing program 3:

10:39:30 executing program 4:

10:39:30 executing program 1:

10:39:30 executing program 4:

10:39:30 executing program 2:

10:39:30 executing program 3:

10:39:30 executing program 1:

10:39:30 executing program 1:

10:39:30 executing program 2:

10:39:33 executing program 3:

10:39:33 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)

10:39:33 executing program 1:

10:39:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:33 executing program 2:

10:39:33 executing program 4:

10:39:33 executing program 2:

10:39:33 executing program 3:

10:39:33 executing program 1:

10:39:33 executing program 4:

10:39:33 executing program 1:

10:39:33 executing program 2:

10:39:33 executing program 4:

10:39:36 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)

10:39:36 executing program 3:

10:39:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:36 executing program 1:

10:39:36 executing program 4:

10:39:36 executing program 2:

10:39:36 executing program 1:

10:39:36 executing program 3:

10:39:36 executing program 2:

10:39:36 executing program 4:

10:39:36 executing program 1:

10:39:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:36 executing program 0:
clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pause()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x0)

10:39:36 executing program 4:

10:39:36 executing program 3:

10:39:36 executing program 2:

10:39:36 executing program 1:

10:39:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:36 executing program 2:

10:39:36 executing program 1:

10:39:37 executing program 4:

10:39:37 executing program 3:

10:39:37 executing program 1:

10:39:37 executing program 2:

10:39:39 executing program 2:

10:39:40 executing program 0:

10:39:40 executing program 4:

10:39:40 executing program 3:

10:39:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:40 executing program 1:

10:39:40 executing program 3:

10:39:40 executing program 2:

10:39:40 executing program 4:

10:39:40 executing program 1:

10:39:40 executing program 0:

10:39:40 executing program 3:

10:39:40 executing program 4:

10:39:40 executing program 1:

10:39:40 executing program 2:

10:39:40 executing program 0:

10:39:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:40 executing program 1:

10:39:40 executing program 3:

10:39:40 executing program 4:

10:39:40 executing program 2:

10:39:40 executing program 0:

10:39:40 executing program 1:

10:39:40 executing program 3:

10:39:40 executing program 2:

10:39:40 executing program 4:

10:39:40 executing program 0:

10:39:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:40 executing program 1:

10:39:40 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x4, @ipv4={[], [], @dev}}, 0x1c)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:40 executing program 0:
dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x140081)
r1 = memfd_create(&(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\xc6\x94\xd8\":\x16\xf5\xd4Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x91\"\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16M\x00\x80\x00\x00\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00&m=E\xa2\x95\xbc\xbfI\x0fU\x7fj\xac', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20008102000000)

10:39:40 executing program 4:

10:39:40 executing program 2:

10:39:40 executing program 1:

10:39:40 executing program 0:

10:39:40 executing program 1:

10:39:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCMSET(r0, 0x5418, 0x0)

10:39:40 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:40 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x4, @ipv4={[], [], @dev}}, 0x1c)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x803, 0x20000000000000ea)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:40 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x30000000000)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
gettid()
openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001640), 0x4)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffff7fff, 0x6, 0x0, 0x100000001, 0xffffffffffff7fff, 0x0, 0x3, 0x80000000, 0xfffffffffffffffc, 0x88f3, 0x98b, 0x1ff, 0xfffffffffffffffa, 0x4, 0x1000, 0x0, 0x100, 0x2, 0x3, 0xff, 0x80, 0x80, 0x4, 0x8000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1c0000, 0x7}, 0x4a, 0xffffffffffff7fff, 0x7, 0x0, 0x7, 0x8, 0x3}, 0x0, 0x1, 0xffffffffffffff9c, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000200)=@ethernet={0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="e07890f1b5cfc99ec13896c614e997334cb6f2be11925564e06ae80d38233fcbd58312423cb65d91eaecf89fc063484331d1", 0x32}], 0x1}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08)

10:39:40 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x4, @ipv4={[], [], @dev}}, 0x1c)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:40 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:40 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0663044001"], 0x0, 0x0, 0x0})

10:39:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  542.524691] binder: 26278:26283 ioctl c018620b 0 returned -14
[  542.569160] audit: type=1400 audit(1555929581.013:223): avc:  denied  { transfer } for  pid=26278 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  542.596264] binder: release 26278:26283 transaction 92 out, still active
[  542.611138] binder: 26278:26283 ioctl c018620b 0 returned -14
10:39:41 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x1, 0x10400003)

[  542.617325] binder: send failed reply for transaction 92, target dead
[  542.659109] binder: release 26278:26287 transaction 96 out, still active
10:39:41 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
r0 = socket$inet(0x2, 0x803, 0x20000000000000ea)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00006cdffb), 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r2 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000004)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

10:39:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:41 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00')
syz_genetlink_get_family_id$fou(0x0)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  542.719979] binder: send failed reply for transaction 96, target dead
10:39:41 executing program 3:
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

10:39:41 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:41 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x800000000000002, 0x1)
listen(r0, 0x0)

10:39:41 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x30000000000)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
gettid()
openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001640), 0x4)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffff7fff, 0x6, 0x0, 0x100000001, 0xffffffffffff7fff, 0x0, 0x3, 0x80000000, 0xfffffffffffffffc, 0x88f3, 0x98b, 0x1ff, 0xfffffffffffffffa, 0x4, 0x1000, 0x0, 0x100, 0x2, 0x3, 0xff, 0x80, 0x80, 0x4, 0x8000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1c0000, 0x7}, 0x4a, 0xffffffffffff7fff, 0x7, 0x0, 0x7, 0x8, 0x3}, 0x0, 0x1, 0xffffffffffffff9c, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000200)=@ethernet={0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="e07890f1b5cfc99ec13896c614e997334cb6f2be11925564e06ae80d38233fcbd58312423cb65d91eaecf89fc063484331d1", 0x32}], 0x1}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08)

10:39:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:41 executing program 0:
semtimedop(0x0, &(0x7f0000000200)=[{}, {}], 0x2, 0x0)
semop(0x0, &(0x7f0000000000)=[{0x0, 0xb, 0x3f00}], 0x1)

10:39:41 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x30000000000)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
gettid()
openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001640), 0x4)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffff7fff, 0x6, 0x0, 0x100000001, 0xffffffffffff7fff, 0x0, 0x3, 0x80000000, 0xfffffffffffffffc, 0x88f3, 0x98b, 0x1ff, 0xfffffffffffffffa, 0x4, 0x1000, 0x0, 0x100, 0x2, 0x3, 0xff, 0x80, 0x80, 0x4, 0x8000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1c0000, 0x7}, 0x4a, 0xffffffffffff7fff, 0x7, 0x0, 0x7, 0x8, 0x3}, 0x0, 0x1, 0xffffffffffffff9c, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000200)=@ethernet={0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="e07890f1b5cfc99ec13896c614e997334cb6f2be11925564e06ae80d38233fcbd58312423cb65d91eaecf89fc063484331d1", 0x32}], 0x1}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08)

10:39:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:41 executing program 3:
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

10:39:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840), 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
r0 = socket$inet(0x2, 0x803, 0x20000000000000ea)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00006cdffb), 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r2 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000004)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

10:39:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:42 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x64042, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x30000000000)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000))
gettid()
openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001640), 0x4)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffff7fff, 0x6, 0x0, 0x100000001, 0xffffffffffff7fff, 0x0, 0x3, 0x80000000, 0xfffffffffffffffc, 0x88f3, 0x98b, 0x1ff, 0xfffffffffffffffa, 0x4, 0x1000, 0x0, 0x100, 0x2, 0x3, 0xff, 0x80, 0x80, 0x4, 0x8000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1c0000, 0x7}, 0x4a, 0xffffffffffff7fff, 0x7, 0x0, 0x7, 0x8, 0x3}, 0x0, 0x1, 0xffffffffffffff9c, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000200)=@ethernet={0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="e07890f1b5cfc99ec13896c614e997334cb6f2be11925564e06ae80d38233fcbd58312423cb65d91eaecf89fc063484331d1", 0x32}], 0x1}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08)

10:39:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xbc})
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x4000000000000005)
r3 = dup3(r2, r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='>', 0x1}], 0x1)

10:39:42 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/277], 0x115)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000003e00000000000000000000000000400000000000000000000000000000000000000005003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f95c9d0ec9fb42d92d471cbe5"], 0x340)
recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000700)=""/132, 0x84}], 0x2}, 0x0)
sendto$inet(r0, &(0x7f0000000f40)="03", 0x1, 0x3, 0x0, 0x0)

10:39:42 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
fremovexattr(r1, &(0x7f0000000240)=@random={'security.', '-,em0vmnet0\x00'})

10:39:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:43 executing program 0:
process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000540)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

10:39:43 executing program 2:
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000080)=[{0x0, 0xffffffff}], 0x1)
semtimedop(r0, &(0x7f0000000200)=[{0x0, 0x9}, {}], 0x2, &(0x7f00000001c0)={0x77359400})
semop(r0, &(0x7f0000000000)=[{0x0, 0xb}], 0x1)

10:39:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
clock_gettime(0x0, &(0x7f0000000900))
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0xa00}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})
write$binfmt_elf64(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="7f454c4606ff0502060000000000000003003f00010000002c010000000000004000000000000000bd0000000000000030030000000038000200580604005e000700000015040000ccceffffffffffff050000000000000001000100000000000400000000000000070000000000000003000000000000000500006074000000030000000000000007000000000000000700000000000000000000800000000002000000000000000600000000000000447905b0efe50a4c390f0f7b5c156bb7032755e28700"/757], 0x2f5)

10:39:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000810000000000fd908488d8dd2dfaa833"], 0x12)

10:39:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x104001)
r1 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
sendfile(r0, r1, 0x0, 0x20000102000004)

10:39:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setresuid(0x0, 0xfffe, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffbd, 0x0, 0x0, 0x0)

10:39:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xbc})
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x4000000000000005)
r3 = dup3(r2, r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='>', 0x1}], 0x1)

10:39:43 executing program 0:
perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000540)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)
gettid()

10:39:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:43 executing program 3:
perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0)
process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000540)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x2000000)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0)
gettid()
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0xa, 0x0)

10:39:43 executing program 4:
semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0)
semtimedop(0x0, &(0x7f0000000200)=[{0x3, 0xfffffffffffffffb, 0x1000}, {0x0, 0x9, 0x1000}, {0x2, 0x100000001, 0x1000}, {0x3, 0x5, 0x1000}, {0x3, 0x101, 0x1800}, {0x1, 0x0, 0x1000}], 0xac, &(0x7f00000001c0)={0x77359400})

10:39:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="7f454c4606ff0502060000000000000003003f00010000002c010000000000004000000000000000bd0000000000000030030000000038000200580604005e000700000015040000ccceffffffffffff050000000000000001000100000000000400000000000000070000000000000003000000000000000500006074000000030000000000000007000000000000000700000000000000000000800000000002000000000000000600000000000000447905b0efe50a4c390f0f7b5c156bb7032755e28700"/659], 0x293)

10:39:44 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))

10:39:44 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r1 = gettid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

10:39:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:44 executing program 3:
perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0)
process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000540)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x2000000)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0)
gettid()
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0xa, 0x0)

10:39:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
fanotify_init(0x8, 0x0)

10:39:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:44 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

10:39:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f121c123f319bd070")
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0x40085511, 0x0)

10:39:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:44 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:44 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2d000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}, [@RTA_TTL_PROPAGATE={0x8, 0x4, 0x15}]}, 0x24}}, 0x0)

10:39:44 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r1 = gettid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

10:39:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10:39:44 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:44 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x0, 0x10ffff)
pwrite64(r0, &(0x7f0000000180)='?', 0x1, 0x0)

10:39:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2d000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}, [@RTA_TTL_PROPAGATE={0x8, 0x4, 0x15}]}, 0x24}}, 0x0)

10:39:44 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:44 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r1 = gettid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

10:39:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r1 = gettid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

10:39:44 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:39:45 executing program 3:
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:45 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
flistxattr(r0, &(0x7f0000000180)=""/174, 0xae)

10:39:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:45 executing program 3:
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:39:45 executing program 3:
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:45 executing program 0:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
nanosleep(&(0x7f0000000480)={0x77359400}, &(0x7f00000004c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x14)

10:39:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r1 = gettid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

10:39:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00fb403d7a38ba1ab6f12f"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:39:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}, [@RTA_TTL_PROPAGATE={0x8, 0x4, 0x15}]}, 0x24}}, 0x0)

10:39:45 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:45 executing program 3:
r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:46 executing program 3:
r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0xa00}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})

10:39:46 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:46 executing program 3:
r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680})

10:39:46 executing program 1:
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0))

10:39:46 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
dup3(r0, r1, 0x0)

10:39:46 executing program 3:
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:46 executing program 1:
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0))

10:39:46 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)

10:39:46 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
r1 = gettid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

10:39:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
sync()

10:39:46 executing program 1:
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000000c0))

10:39:46 executing program 3:
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/1, 0x1}], 0x7, 0x0)

10:39:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
clock_gettime(0x0, &(0x7f0000000900))
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0xa00}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})
write$binfmt_elf64(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="7f454c4606ff0502060000000000000003003f00010000002c010000000000004000000000000000bd0000000000000030030000000038000200580604005e000700000015040000ccceffffffffffff050000000000000001000100000000000400000000000000070000000000000003000000000000000500006074000000030000000000000007000000000000000700000000000000000000800000000002000000000000000600000000000000447905b0efe50a4c390f0f7b5c156bb7032755e28700"/375], 0x177)

10:39:46 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:46 executing program 3:
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe7})

10:39:46 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070")
r2 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0)
fremovexattr(r2, 0x0)

10:39:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/1, 0x1}], 0x7, 0x0)

10:39:47 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0)

10:39:47 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f121c123f319bd070")
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5846c24acbe27ccd)

10:39:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00')
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/1, 0x1}], 0x7, 0x0)

10:39:47 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')

10:39:47 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0)

10:39:47 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:47 executing program 0:
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x9549, 0x0, 0x0, 0x208000, 0x0)

10:39:47 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:47 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xffffffffffffffff}]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
readahead(0xffffffffffffffff, 0x0, 0x0)

10:39:47 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0)

10:39:47 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000602000000000000007d020000"], 0x10}}, 0x0)

10:39:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f121c123f319bd070")
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

10:39:47 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:47 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe7})

10:39:47 executing program 4:
perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7dfe05a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x5ee, 0x0, 0x0, 0x620, 0x0, 0x400, 0x2, 0x0, 0x8001, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x9)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0)

[  549.349913] audit: type=1326 audit(1555929587.793:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=26687 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
10:39:47 executing program 0:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
r2 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0)
pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
read(r2, &(0x7f0000001440)=""/184, 0xb8)
fcntl$setstatus(r1, 0x4, 0x0)
sendfile(r1, r2, 0x0, 0x80003)

10:39:47 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:47 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe7})

10:39:47 executing program 0:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)

10:39:47 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

[  549.962357] device bridge_slave_1 left promiscuous mode
[  549.968130] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.005200] device bridge_slave_0 left promiscuous mode
[  550.011570] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.065360] audit: type=1326 audit(1555929588.513:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=26687 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000
[  550.161309] device hsr_slave_1 left promiscuous mode
[  550.202538] device hsr_slave_0 left promiscuous mode
[  550.245258] team0 (unregistering): Port device team_slave_1 removed
[  550.254918] team0 (unregistering): Port device team_slave_0 removed
[  550.267541] bond0 (unregistering): Releasing backup interface bond_slave_0
[  550.334723] bond0 (unregistering): Released all slaves
10:39:48 executing program 5:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e61853100022200000100000100000000000000e4dbb37487e9010400005153964c3d6004000000001b2300000503000018030000cc000000ac01000000000000000000000000000000080000f34f8dfac0dc1695"], 0x1)

10:39:48 executing program 4:
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140), 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)

10:39:48 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0))

10:39:48 executing program 3:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xe7})

10:39:48 executing program 0:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0)

10:39:48 executing program 2:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}}}}}, 0x0)

[  550.476477] ------------[ cut here ]------------
[  550.476883] kobject: 'loop2' (ffff8880a49bc9a0): kobject_uevent_env
[  550.481401] WARNING: CPU: 1 PID: 2239 at net/batman-adv/multicast.c:315 batadv_mcast_mla_update+0x1599/0x1b00
[  550.481409] Kernel panic - not syncing: panic_on_warn set ...
[  550.481409] 
[  550.481417] CPU: 1 PID: 2239 Comm: kworker/u4:4 Not tainted 4.14.113 #3
[  550.481422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  550.481431] Workqueue: bat_events batadv_mcast_mla_update
[  550.526819] Call Trace:
[  550.529408]  dump_stack+0x138/0x19c
[  550.533057]  panic+0x1f2/0x438
[  550.536343]  ? add_taint.cold+0x16/0x16
[  550.540463]  ? batadv_mcast_mla_update+0x1599/0x1b00
[  550.545568]  ? batadv_mcast_mla_update+0x1599/0x1b00
[  550.545699] kobject: 'loop2' (ffff8880a49bc9a0): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  550.550672]  __warn.cold+0x2f/0x34
[  550.550683]  ? ist_end_non_atomic+0x10/0x10
[  550.550693]  ? batadv_mcast_mla_update+0x1599/0x1b00
[  550.550702]  report_bug+0x216/0x254
[  550.550714]  do_error_trap+0x1bb/0x310
[  550.550724]  ? math_error+0x360/0x360
[  550.550733]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  550.550747]  ? debug_check_no_obj_freed+0x2aa/0x7b7
[  550.594531]  ? check_preemption_disabled+0x3c/0x250
[  550.599550]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  550.604403]  do_invalid_op+0x1b/0x20
[  550.608111]  invalid_op+0x1b/0x40
[  550.611558] RIP: 0010:batadv_mcast_mla_update+0x1599/0x1b00
[  550.617276] RSP: 0018:ffff8880a1e3fbf8 EFLAGS: 00010297
[  550.622641] RAX: ffff8880a1e32500 RBX: ffff8880a1e3fcf0 RCX: 1ffff110143c65b9
[  550.629909] RDX: 0000000000000000 RSI: ffff8880a1e32da8 RDI: 0000000000000286
[  550.637174] RBP: ffff8880a1e3fd38 R08: 000000005097db3f R09: ffff8880a1e32dc8
[  550.644441] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a1e3fcf0
[  550.651710] R13: ffff888067c98900 R14: ffff888067c99984 R15: ffff8880a1e3fd10
[  550.656535] kobject: 'loop5' (ffff8880a4aae260): kobject_uevent_env
[  550.659079]  ? batadv_mcast_mla_update+0x1599/0x1b00
[  550.659096]  ? batadv_mcast_querier_log.isra.0+0x100/0x100
[  550.659108]  ? __lock_is_held+0xb6/0x140
[  550.659116]  ? check_preemption_disabled+0x3c/0x250
[  550.659129]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  550.690712]  process_one_work+0x868/0x1610
[  550.694964]  ? pwq_dec_nr_in_flight+0x2e0/0x2e0
[  550.699662]  worker_thread+0x5d9/0x1050
[  550.703658]  kthread+0x31c/0x430
[  550.707021]  ? process_one_work+0x1610/0x1610
[  550.711528]  ? kthread_create_on_node+0xd0/0xd0
[  550.716206]  ret_from_fork+0x3a/0x50
[  550.720923] Kernel Offset: disabled
[  550.724695] Rebooting in 86400 seconds..