80000000500000008000000080000000400000001000000ff070000000000001f0000007f0000000103ff07ffffffff7f000001ff0000ff000000ff7465616d5f736c6176655f30000000007663616e300000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000ff00020200000000000000000000000000009800b80000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000940000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x2a0) 03:47:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4004ae99, &(0x7f0000000000)) 03:47:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000010b, 0x0) 03:47:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:37 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000a80)) 03:47:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, r1, {0xfff0, 0xffff}, {0xffff, 0x6}, {0xfff1, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000300)={{0x2, 0x0, 0x9, 0x20, 'syz1\x00', 0x1}, 0x1, [0x4, 0x2, 0x1, 0x6ad6314c, 0x609, 0x0, 0x3, 0x7ec6, 0x400, 0x61c245b4, 0xf4c4, 0x10000, 0x3, 0x7, 0x3, 0x5, 0xf2b9, 0x1400000000, 0x9, 0x323bd5a0, 0x3a2, 0x0, 0x9, 0x0, 0x7, 0x100000000, 0x1, 0x200, 0x4, 0x2, 0xff, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x7fff, 0xfff, 0x0, 0x5, 0x7fff, 0xbfc8, 0x80000001, 0x9, 0x2, 0x27a, 0x9, 0x6, 0x100000001, 0x6000000000000000, 0x5, 0x8, 0x3f, 0x1f, 0xf458, 0x1, 0x10001, 0x6, 0x4, 0xffffffff, 0xff, 0xfffffffffffffff9, 0xdd9, 0x400, 0x0, 0x400, 0x100000001, 0x8a, 0xb65, 0xfffffffffffffffc, 0x7, 0x88e, 0x318b, 0x8, 0x5, 0x1677, 0x8, 0x800, 0x1, 0x7, 0x6, 0x5, 0xbea2, 0x500, 0xc8, 0xfffffffffffff001, 0x2, 0x8001, 0xff, 0x1, 0x0, 0x2, 0x80000001, 0x1, 0x7ff, 0x1, 0x7, 0x7fffffff, 0xfff, 0x100000001, 0x100000001, 0x7, 0x7f, 0x7fffffff, 0x2, 0xaf4b, 0x100000001, 0x8, 0x7f, 0x4, 0x4, 0x2, 0x3, 0x6, 0x6, 0x2, 0x7, 0x0, 0x1, 0x4, 0x4978, 0x9, 0x8, 0x4, 0x8, 0x16, 0x4, 0x9]}) 03:47:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) fremovexattr(r0, &(0x7f0000000280)=@random={'trusted.', '\x00'}) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @dev}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', r2}) 03:47:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x541b, &(0x7f0000000000)) 03:47:37 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, 0x0) 03:47:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000f1, 0x0) 03:47:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e22}}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 03:47:38 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x0, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x5450, &(0x7f0000000000)) 03:47:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socketpair$inet(0x2, 0x80a, 0x9, &(0x7f0000000040)) 03:47:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000100)=@random={'os2.', '\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x20000, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000044, 0x0) 03:47:38 executing program 3: creat(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000005c0), 0x24, 0x0) 03:47:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x1, 0x6, 0x103, 0x0, {0x0, 0x2, 0x8001, 0x4}}) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x50040) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x2, 0x6, 0x1, 0x1, 0x1f, 0x8, 0x100, 0xffff, 0x1f, 0x0, 0x3f, 0x7ff, 0xbe4, 0x100000000, 0x0, 0x1d}}) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000100)) r1 = dup2(r0, r0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000180)={0x0, 0x100000001, 0xb84f, &(0x7f0000000140)=0x3}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 03:47:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000064, 0x0) 03:47:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002a00380a2abd7000fbdbdf2500000000485f0b78971338aaa512ddc3ccac995e13b072938c31dfb79f4cacc08d49728b1210294869d5ad2169f3dc9b10bfaf589e7490d77dba17a2ed7da8c7b44091beb4e15b76865eaa9761722bda52c0e6c07e28c8fc20531a2ef376fe505e3fd6bb0212138810bd7e493b1ca8f0e00851c6c5114dd0f59092a4fc2650c4b9b28079c94ac4c75011f5987f6af940b6db4377ee4e5bbdd33076bb51dcda1d85fd96315e712920b6557e719ddd6d189d3629ee0020ad042dd1172da9ba2fb2c790df0225", @ANYRES32=r1, @ANYBLOB="f6ff070005000e00f1ff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x81a0ae8c, &(0x7f0000000000)) 03:47:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], @ANYRESOCT, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=r0]], &(0x7f0000000200)=0x1) [ 344.413616] IPVS: ftp: loaded support on port[0] = 21 [ 344.595877] device bridge_slave_1 left promiscuous mode [ 344.601453] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.656039] device bridge_slave_0 left promiscuous mode [ 344.661514] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.728639] team0 (unregistering): Port device team_slave_1 removed [ 344.739900] team0 (unregistering): Port device team_slave_0 removed [ 344.751243] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 344.789009] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 344.844882] bond0 (unregistering): Released all slaves [ 345.405689] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.412266] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.420351] device bridge_slave_0 entered promiscuous mode [ 345.465730] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.472164] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.480834] device bridge_slave_1 entered promiscuous mode [ 345.524472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 345.574420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 345.711967] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 345.758304] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 345.964700] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 345.972298] team0: Port device team_slave_0 added [ 346.015340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 346.022706] team0: Port device team_slave_1 added [ 346.060622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 346.067677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.075824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.101447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 346.108289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.116434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.152385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 346.159617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.170645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.208494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 346.215874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.224972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.511095] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.517500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.524070] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.530479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.538040] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 346.955598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.461974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.559565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 347.651623] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 347.657949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.664962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.757118] 8021q: adding VLAN 0 to HW filter on device team0 03:47:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000010e, 0x0) 03:47:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000180)={0x2, 0x4e23}, 0x10) 03:47:43 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x800) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000100)=@known='system.sockprotoname\x00') fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:43 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200000, 0x0) r1 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x220, {0x10, 0x2, 0x1}, 0x20, r1, r2, 0xffffffff00000000, 0x4, 0x14000000000000, 0xfbc, 0x100, 0x7fffffff, 0x0, 0x200, 0x200, 0xffffffff, 0xfffffffffffffff9, 0x3ff, 0x4, 0xd15, 0x5}}, 0xa0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x800, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) signalfd4(r3, &(0x7f0000000100)={0x8}, 0x8, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r4, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc020660b, &(0x7f0000000000)) 03:47:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x14, 0x0, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e80810645756c6c29000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 03:47:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'os2.', '\x00'}) 03:47:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x402c582a, &(0x7f0000000000)) 03:47:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2000, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7, @mcast2}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x10000, @remote, 0x7fffffff}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e20, 0xfffffffeffffffff, @remote, 0x6}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x17}, 0x100000000}, @in6={0xa, 0x4e21, 0x80000000, @empty, 0x510}], 0xdc) 03:47:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', 'vboxnet0\x00'}, 0x0, 0xfffffffffffffefe, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {r1, r2/1000+10000}}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') fcntl$setflags(r0, 0x2, 0x1) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="cc0001000000007b0000000700000000000000000000008f45c78787ce5f03de9115622c74819e240e6d4f8c8d97d3902427a8b03587e6d403dcc5d173962381f2c4add62924a35248226a6225a60c1c7fc474e200b4e454c43a5f98822c375024068caca487f92442f6e3da61c229902ff85ac9bc0c7b55512b6a634e853a8057e10eed46e79045698f7dfc002c54000000000000000000000000000000ad2c7ee9ee308b40f6b1705fb6b1df5667c649c662076de10300000000000000d948171746e7de245de0d0d8705b64ec39b3"], 0xb0) 03:47:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000137, 0x0) 03:47:43 executing program 3: r0 = socket$inet6(0xa, 0x803, 0xbb) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local, 0x0, 0x1, [@broadcast]}, 0x14) 03:47:43 executing program 4: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs(r1, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) 03:47:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc0189436, &(0x7f0000000000)) 03:47:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20}}, 0x5, 0x5}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r1, 0x47, "47c5f3a413f7022a11f1b5897c06719687c54d88af7190ae2ad97301404445fb3935fb7a5689c4c1dc936adde60b53fbb2db61ec96359ad80a40757022f465ee9ca8edf13dd824"}, &(0x7f0000000240)=0x4f) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x200000, 0x0) 03:47:43 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x1f, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x1) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:47:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fremovexattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="fc95a71cd34558a3f273"]) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'proc\'user:em1loppp0#selfnodev\x00'}, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000009b, 0x0) 03:47:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x2, &(0x7f0000000000)) 03:47:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, 0x0, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") sendfile(r0, r0, &(0x7f0000000040), 0xffff) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) fremovexattr(r0, &(0x7f0000000080)=@random={'trusted.', '-\x00'}) 03:47:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='syscall\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000140)={0x0, 0x3, 0xfff, 0x100}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x4, 0xa, 0x101, 0x20000002, 0x100000001, 0x1, 0x1f, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0x8, 0x8001, 0x8, 0x9, 0x6}}, &(0x7f0000000240)=0xb0) sendmmsg$unix(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000380)="8c31d69a792546817bb6755b36083e1397a8a315265ff181b57e4885ba4db0e9ec6404ba93e7db824dd50994e46aec0f9f8d2764821e52db3a67a0815bc075178b9194411eb58f079ae706e5d59d9549896fcb8e60acd2b9c1cf15b39ffbcc53c75cf6efd992fef5518d1e22d09a95c17f28cc15a237871f3d12a68cfd92ff31c62e128126f4ee2caa60cc76919a7af612b651e6f7c4f6e38bc71fc3f92f2cd5f4942fe62ce4adf4", 0xa8}, {&(0x7f0000000440)="971a31503832729ed98de099e269219fac311377a3a519918a2489276fa22911ea4711b4c0451500219c3641979cfd27041234da33170d21d59687e33515e1961be769bd90e2f35c3b06ac45e1b6257620b42e3464cf963a64bb33a17af6714a23523fa301aa853e4ae0bf58750553a06107d8d39461f746604b19f61fa8be368fb5f9965bf332f45deab65de3388b186220fc7d25947de2bdbc59ec6a5a7a0896f6f1f72b1de343439258eba033850d9957ded0c6", 0xb5}], 0x2, 0x0, 0x0, 0x48000}], 0x1, 0x20008000) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r2, 0x1000000006ae0, 0x1, 0x1}, 0x10) fremovexattr(r0, &(0x7f0000000100)=@known='user.syz\x00') ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x6, "36d48855631f8f0db0be3c0188ad78cd24ddcc91bb6ade6c65e2c3fe6a4d648e", 0x3, 0x1}) 03:47:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x5460, &(0x7f0000000000)) 03:47:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x20, @remote, 0x7400000000000}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x5, 0x7fffffff, 0x6}, &(0x7f0000000200)=0x10) 03:47:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000134, 0x0) 03:47:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x3, 0x2) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) tgkill(r1, r2, 0x3e) 03:47:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x0, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000c80)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)=@getsa={0x14c, 0x12, 0x300, 0x70bd26, 0x25dfdbff, {@in6=@mcast1, 0x4d6, 0xa, 0x33}, [@output_mark={0x8, 0x1d, 0x6}, @sa={0xe4, 0x6, {{@in=@local, @in=@rand_addr=0x4, 0x4e20, 0x6, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0xef, r1, r2}, {@in6=@mcast1, 0x4d3}, @in=@local, {0x1, 0xe47, 0x906f, 0x9, 0x5, 0x5, 0x6, 0x1}, {0x401, 0x1, 0x2b8b, 0xf329}, {0xffff, 0x80, 0x10001}, 0x70bd27, 0x3507, 0xa, 0x7, 0x0, 0xa0}}, @offload={0xc, 0x1c, {r3, 0x1}}, @lastused={0xc, 0xf, 0x9}, @ipv6_hthresh={0x8, 0x4, {0x2, 0x80}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd28, 0x5}}, @output_mark={0x8, 0x1d, 0x36b3}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) 03:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400fb2300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) 03:47:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x6, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000cf, 0x0) 03:47:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, 0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:44 executing program 4: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/bnep\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r3, &(0x7f0000000100)=@known='user.syz\x00') 03:47:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x39, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00", 0xffffffffffffffff}, 0x30) write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x6, {{0x73, 0x100000000, 0x0, r1}}}, 0x28) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000180)='user.syz\x00', 0x9, 0x2) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') sendmsg$kcm(r0, &(0x7f0000002300)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'ifb0\x00'}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="7564fc7360c6024f6a2d1097f19cb9694cee64bfaf15457e4de5f128919478f1b54c91109400d8fbdfb36f831913acc9044338b89f4df5b38ddec8f0786ee3f67066cb6a798f8623b4384151855f954e225a3bb1784e14dfe2ef2485aab10be557ce57f4777c8b3a0078f789210bfe010df1eee03585ceca4e5283c5d4e5dc46b29aac506c112c035f70365125c4b8fcf69da9cf9400d6d1c55d360e69658b78a2396b587d0c33b326b3394211d55b938165829e64fd4b04ef3220a503c912ea3ec65ddb07e5449c1d390ae659ee77be806fcd2b3bf608eeef3dabc3063b02fcda1fb918cd06a628e1063f1f987e08e4ab37c1a154b036da1f9c6bc909e7382a0f95bde75e13920e306dda1f618dcf9c9bfd136d030ff0dbc36c6d55dcecd5ee64c645ed8371f2d8e82acbfc7b8c465352a2e3c7ab6c0a187050d664e807b054b7f68111dca45db108842bd65e372fc9f80f6a436e737e7086378c16ff12e983a890e551d1a45c4aefa68626d13fa89358fb3507bcb0b2ad9421c8e7c0ce28e3e591fcf3ced4ae1d37b166a74a2861d7fa8b4525f1d0bea017c3da409cfbf14e23ba1af483cc369a776119b78e0dc6a85ebcb21684025bcc54480efa7ab0dbe0a0d3d13e6bd6f37a10dbbeee6a0394ce7231519d2f9be951e535acff587569a18e44e792cbad06d4ca8d1fd8f9ba018dcbf1c080f2b7f407a3cb8b4e87adf2c93304f728c22bdf50af9dc4788cbbbe00de6b9ac34759498eac8a7e504a141a3a3c4a48ec6fc335757df31229ef72127987afc6d6f7a64b73bd84029b7d707740d90a7088ea3e8600954f5076554e23a1fea7526a91f91f410e2174221e3586a52df483cb0a71c3e89e97ce7eb3b97b35720d4f95661722a92fe1ce17ba4a305de0ea0cca0794ab916104a4e1fa6c972d261e4a9c40c3883cfbffa1de162d1fd23ec5f5bfb577f373d8591560a0324a13a95e6c924398ac19899be7c46999f31d77b6b12a930f3c5b444cd22f0579b2e8d28fb307c43aa041cd93a193d4474a47681f81beae5b9e49c11c86d2c310715f3f37137c93a17fcc31019b883d8433a4c737493e8d256a1bbadd0e9d23e340742fb6a35b260e2fce83d042c7429fa6fcc73c47a2a98cf567c7b770d73ec2d29aaa0a7583e277b124b229b61964f16fed9840c793dc9dce2c79fda49a1a865423779aacc5382118a59c01185a5e8e793236bb8fb07d23084fafe940d5afedd221a3416287dafa4c86540becaa6a88a8e0fcb7fad30758f00ad4fbdd49a3019d8300c3b2b73711ad1be137698de8aac04e23a83027419e7490c027d6001645f618e1a809643233e87aaa6570147389b5f2a38fb03e369fe29cbf10c2b903112d4b19acbd6dda46bcd17c0c3392fe2e5c987acf8281db7257d8f3333bebbb361e44d2ae45728e6dfcb60d9c5c23cdb45f941a5a2c9749c93bf72d4bb82996032d9261794ecd40e9f2bf64c9d7894efec3e14701f40e3219883fa941bfadcbd76d192d18da763d93dddb9c74b6c94da76461df919d4131e94c7cb2d102afd3667e3ade59c1ba4ad1a472f7054b2c480d4f87276fc36ef11872c742617aa5161c8f579ed17ed60ac7b2b4da2d3a8beac9280f6beb2dd14a1070ca796735db1d7d012f90c28df17952ccae8fd6965bb91b41778d714c9df5bd12426a32aebfdb0c4bbef67612c22060e082b23549f5359ceb240c657413d5f51b861179e323ceefbf28fff32416565949117d8d277d03336f0d362576c40185d81dd621ed2dfe955b83b6c46bc34463ae53d895125118db085c0ac86dfaea82e1d50f22fcfd5517c708f387ec6f2ff5e2c592150f22c38921a44812a4e1dd7d44360b36f9dd0200e79571fb08b949d25b55d34ad493f4151ed639afd788d2dbdc9ef7234679d9be07a398f30d30e2b0b57e7d4e5a4034070b457228974fe0b5ed5f5006a36f0f89817f3dcacae97c20e7f5978429bc44bc195694e5732763ff2e796b4b05794dbd64d219e16f1049fc3523f32f809acd8c6b9a7057566a8f487f46ab3471b1e10e3eb9123a3685be0e62af44838d0c4d553f827a852690e629b08f6cf30bf8e308be8e656fec4f0e227b7092fe234eab76d0bce0fac72c6f46631d0c5bd7cb7ea1b66fd1e8dcadd6afa1ba553faed6d8bfe47e2be7ebac62b9f46f7aaf9529970ff3ea05132ca02dd2fc8b3b7f3770870b0a6b97a3c6230f1291a1d654ce1233f0d53a51057f7e28994fc1433ec9f70b5f986165f47de42ba0ab4e890e3690ca135af0847e2165f6cf91ea3b5446132e395322fdc58a57f91ea7e3c93677f04362996dbfc0f6d738d2755129278ff16dd26bc98032d9fd03056090365731f493b2d6476f6e5cb0ba40dacbed22145221b21e4364b622a0f99578e7f5f6df54014cc749f33111a13c34bb774bf760babf31966528d5a8279d30d5a510be29a429ddacdd53f85c305798dd8bbda67ef5c20b172979924037607eedf4d8c8da41ccada5607f6eec407e3bf4f3f4a3b791e7c01844e11d85d26be9f20ced03fe8ae3237edaf53ea90c0d423ca6a5c3a4cac58233004f7a27029549590e041fa3055f47330a5ebcba1c7c59240f2ffed1d246a3fe0c5fc8ca810401b725e2316cc88d66e24f26d0b8c247daf484e39c604e6cd27064b8f2780be7d7a4a10d38519c2bf64147aaea35ba4cdbe43af9d8583b7a6507e18063a2d3557d098088220592f25568dcc489ec22d05e5b34db0bea260ab2880ff746f72e8c97dfd2ef349cee112855b73772e60551af13f5364f36135b0d9139718b81f1562a940b7def666f4440b0d430f3bf254884266d2a397a6e61423440c2c720bf30861249d7c21fccb227de300be8a3893495a2e1235962a8ce374815b8d5d97b89fd819f276655989f25792b7f17a244e0cd98368f7a0f4bdf22a6f8601bce8f35bed1a89ab0bc87d38410986f3cc9362511b9eb0d286e4e7b2f03140425e82962e076316a07ca5073fd13cff43c75a130a5bb0c649108448771e50e36127d1a7b3b4a6e3378c5f75e60bd7578e592a6dee363e02144a8d9a73561d9ea700e44ccde7dba8fc8eb8b2c4fa058e600e2cb6da43e4dbf511a11f18bb7ced0426d17c37bade543119cb53964a30c8d18acedfe1e811a263547ca27644b537cc1c9e024f992dd2cad407a76f47a51fa6863b9c4cb7cbd330de1d442af09310709f0c32aa9155cc45c2e0e20378aa3af1e77db000b52006bec15407ed16a43e72d899c1fad7d97d703ad64f495813c47ca7615b04574cd97872014ca358ba200273f4075b673a9f4b91f38298cfffaf1bc4c262813498f4e18a67f93eaad8a2bb07429b5120692b3e76a3bfc218f8382f166666557d36bd42198b1108c42f4ed7a0ee08a22b1a810621ceb68064cda4ce01f8a5cb7e2ef32d8438b7991600df0a0e828ef37f268ffc44a0720db3fbf95a58c8b9ef0eeadb9619a312f2a5b0020b181e6cc24c9217e2b19a778d3dbdd9e8804b5f2b7009081a3600988a9c85bff062493c5a2bf8f5378d173c069acf53eb17c16bb08338cb684e9badf7dd6fab49c3bb836cd4c04e0399fd329ab8ccebaf32cc12286def168af8238c1a84681eaa64d0472dfdd413407db2669d488a1b5ce33da4c33a3b3e60d16097185cff3c7c8bccd404451f2bcfdf664557b0abc96c04d88c59b249de26f27807b5dcdc2c2117c7dac3a5c21516de558a6721bb973ce3aa9bf57f329eb168f3872443747585b6cf064e6f6fbd22aba37d78ab7c10b90bfefae235841231faefc0e0ffeadf61b7055482e5f7ca0ef5f160f892ad04ab9d60d39a922ff916d13c63624ef44e57dceef6b152158b483b10e2e42fa503d9652b28c87312eb3876fa1195de112f01ba380f13c263308479abe69451f414192ac03772982e1d3fb5279a9214296664cf648f539c3c354a110150a80d5bdfa9767a85c751a0b56fa4a905fe0795c11280af03ccf6b21030565bc9c64b5d39a96944b22f4fa04777cd2028bb42804637fae57d4df10cf6127878dfeebd7c95b2a828099bc0285ff9ed139145fac11c687837731dbf8e8f9117e47b705017ce139ec7d88ff3ac80d67ae642911b503e6fc6b59563deeca2c987a83cdf4807e11cf711d35d9b48e82f23e846d622db8e94bd034a521cc4dfa4258d8880d09f06a4341986892bdae95466ef301bd145681bfe38b203f3bd6e7fba80fe8c6a771354be433463f80f67a4c34c29a7036e7cb4c77ddd53e304190cf73d8a766382ef20fa6ff37d32b580b4cd21350ca530fe129ba9b3a699282a61e037254e9e1d73cf3d79439e3e67c24eed33f3f6680f66e7c7e33cd2696993670a2c2633abe17e515ddfda83c5fecc4630fed6565c0b5dabf2a59eee2834e7d49ef926c37aa66b6e0966a60076bc7534ae1670ad5e58b6696e3b84de6c1e2be9e71fbe4a02e6704f248a5fe0fcd60987b493ff0fd86eb222e3e5f5c66406fd0e88d1739b1b36bd119d7b78df9f0d5d743a2eb099de74847cd9db16187cb718b795793ff771fc37836d396cfc9bfaebc22c3d33556d0cb01e6c0eed3c5b30f1c7b9e15651c768724bb68a3e2136926ec76331b531f0e00cda23c491a3d3b522034840b4c523242778a3b25002e8054613fcb81e7a6132f496264ee2e9750cc476b63e29d7b9b9dc9b737f4445d6923efb9e53a97432dc7550be343a95b3c9bffd6fc018139b7bd8cc12e0abbfe544a20a612bc20454cae338995ce39ce7068335e22783385a6014786c2a18371c45749d0c298b4aece11b3ac298ba423cbbf686360ece7e092e023ce3f402e67f117dd082ed1db5efd3f8f0fe385756930d066fd38e6a3a6d12182b67a6054576bb8eba2eb18cc61b617ea8071ab969ec952fc5fd1a1d6e0674373c94e366d640ccb0f5db36bf3ac89e54bfcae0571c7b2b8c03b6a7ad936d2b105ee6349ee0d8ec077cae0c8271b205d839015bee0d1de96bf66fa010fd49e20cf3ebf7222cecbbd455fb8f26e790a1b8d48bfe147cc7b7b97b917548ff0967d728bfbcd81ec46e612b65f64a0b2d11c5cad4358347f34501f97c8cd003eb563133a3e29832a51b6e834989772b720820a039e0348eb40e51a937eb92258733fbed989cda265277cb5067273438695882b0121fd0b15f36a764c42168196860a048a41626f8ba0efad3ba29f5268d6005ca1020d67c400288880ca920b9976e3546d0c8bc2d556f53475ea9e4b635babe0ac106843d7a5e801db35575077c86cf781ebd1b301651c9cdec6db76bc6cceda56829b1c2e46ca698058970c21138dd894a2ac153e284b34097a5a785f22f5e0434dc0af2e7d5ea904e2197ada86f2775a47a2b8d1a6b6da6151049ef71ce6ee6df021f9ee3f57379df3b8698d3d835160de8eab067b389d5a8c4dab5fbc98643379ce9334fc6261b1ccc5811639f6d8c551266c9da620c752b31ced0f3f82054f835967be7d72ea6c3fe4e9a5f9980d45299e32c93fa125e61565603688bda223c8b765f2316fe818e910efde245f4063f5665b7439e2235b87da5aaf5ddc15e8ceebbeab26a0c6aa3d23d9092663c28babbe0cbb0f21cf9a3cebd85848a96cea3b465a323d8a5357ee1e23f265a232a34d93d9072fefb8c474e9061e887b19200c90f47ec0ce7ffccaaebc089c8f9c1997b0030e4624d3985234f60960a39dbb191715460f8f496cf01e014a81a5ac5aa4a2181ae76801941dae7b31f17173e806de408123a315ab0328e5053a8faf3ca45e8505b94eb5ea08e665f27289", 0x1000}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x103c, 0x4044050}, 0x80) rt_sigreturn() 03:47:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) syz_open_dev$media(0x0, 0x0, 0x0) flistxattr(r2, &(0x7f0000000080)=""/123, 0x7b) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) 03:47:45 executing program 3: chown(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) pipe(0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x2, r3}) 03:47:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x3, 0x800000000000006) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a22744acf9bd1aa35bb6818"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc4, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0xbeb}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x3f78, @dev={0xfe, 0x80, [], 0x15}, 0x1f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r4}, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x1f, 0x500, 0x0, 0x1c0270, r2}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) r6 = fcntl$getown(r3, 0x9) write$cgroup_pid(r5, &(0x7f0000000340)=r6, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000300)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x20000000000, 0x7, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x5, 0x7, 0xf054}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1}, &(0x7f00000001c0)=0x8) 03:47:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0xffffffffffff5bec, 0x4, [], {0x0, @bt={0x60000, 0x8, 0x1, 0x1, 0x9, 0xffff, 0x200, 0x6, 0x3f, 0xf725, 0x4, 0x400, 0x0, 0x3, 0xe, 0x10}}}) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000002d, 0x0) 03:47:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000002480), 0x0, &(0x7f00002d4000)}, 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 350.679478] irq bypass consumer (token 00000000b0f155f1) registration fails: -16 03:47:45 executing program 3: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x40000000000013, 0x10, 0xe68}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x20) 03:47:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='com.apple.system.Security\x00') 03:47:45 executing program 0: lsetxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000080)={0x0, 0x1ff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0xfffffffffffffffa, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x9, @empty, 0x5d861bc9}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0xa}, 0x1}], 0x64) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x371) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x480440, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) 03:47:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000000a, 0x0) 03:47:45 executing program 3: r0 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ftruncate(r0, 0x10001) 03:47:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa0742030000001f02ac06edbcd7a071fb35331ce39c5a00000000a4ee9b32ed5245f277ff30eff7fc31d1bd") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) fremovexattr(r0, &(0x7f0000000040)=@known='user.syz\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000000c0)=0xfffffffffffffffd) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000080)=0x7) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)) r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0xb50, 0x4000) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d2e2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed5c4080742030000001f02ac06edbcd7a071fb35331c01000000000000a4ee9b32ed5245f277ff30eff7fc31d1bd"], &(0x7f0000000000)='%vmnet1systemvboxnet1L}vmnet1ppp1lovmnet0em0\'.\x00', 0x2f, 0x1) syz_open_pts(r0, 0x40000) 03:47:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000015a, 0x0) 03:47:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)="58c3101b2b1c0b02c6f9533fa0af434d42f8a770940241ad543a282790af281f3efa466db953fe8f16e3b67a16e060dd191bb924fc278afde95f69be8bbe623f103e077e55d98350fea1e242a4c2a9fa35cd9fe567225b586e5be3c773c98f3e811326d30c97ad1637f558dc36f83babc77c712db8316da551e0ae43535ef47a83df9e29f3ec9ae919e802da27e616852f0c04b2652524f0229edf670bfbbae6ad755561044556dd37c0cdb9cd90e829a3f29e7a89ea1e372e39c31821b3a0fad7c3f52a9b4b31cc3996879af7", 0xcd, r0}, 0x68) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:45 executing program 0: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:45 executing program 4: getpgid(0x0) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip6_tables_names\x00') getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=0x1000) timer_create(0x7, &(0x7f0000000000)={0x0, 0x41, 0x2, @tid=r0}, &(0x7f0000000080)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) sendfile64(r1, r1, 0x0, 0x7) fremovexattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7e73322e7d262d240046d942d1707e5cf8e11abfc23c3cd4e5763000afdc12d0b173f5b4680587e47d7974b2fda556bf79da1f34fe1914cfd54f902438cb06c07ac3179000aa6581b7e41192f83456ed41169bf44c02bfac2d3c45a70b584c79cf9f054ac4e9e58297d6fcad3fe4b21bc7049e0679b601d7663444bc1db9e27cc38e21b7d415be47ac6ce41e95df00000000000000"]) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) 03:47:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000040)=0xe8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6}, 0x10) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:45 executing program 3: socket$packet(0x11, 0x2000000002, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getegid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 03:47:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00') 03:47:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000050, 0x0) 03:47:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xc1ba}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x50e1}, &(0x7f00000001c0)=0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fgetxattr(r0, &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f0000000240)=""/155, 0x9b) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:47:46 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d2e2f637075736574f35539f890b6c8419f85cf88e9ea143900"], 0x0, 0x0, 0x2) fremovexattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974792e2f65786500000000000489004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00"]) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='/dev/uinput\x00'], &(0x7f0000000240)=[&(0x7f0000000200)='security.'], 0x900) 03:47:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000074, 0x0) 03:47:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa54370e7495983a9cac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="777365722e2f6578feff000000000409004bddd9de91be10eeaf000ee7a90f79809fc04bfa54fa54370e3a0b983a9cac06edbcd7a071fb35331ce39c5a00"]) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x2, {0x8, 0xffffffffffffff42, 0x1006, 0x0, 0xf, 0xa, 0x2, 0x1}}) 03:47:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000002c0)) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x1}, 0x8) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}) 03:47:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000100)={{0x3, 0x0, 0x2, 0x800, 'syz0\x00', 0x6}, 0x1, [0x5, 0x7e00000, 0x3, 0x1, 0x0, 0x1, 0x9, 0x200, 0x0, 0x8, 0x0, 0x40, 0x1, 0x1, 0x5, 0x6, 0x7fff, 0x5, 0x0, 0x1, 0x2, 0x5, 0x9, 0x9, 0x5, 0xfffe000000000, 0x8000, 0x7ff, 0x5, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x8001, 0xfacc, 0x61, 0x1, 0x1, 0x3, 0x2, 0xff, 0x10001, 0x8ce, 0x9, 0x4, 0xcc, 0x10000, 0x0, 0x100, 0x0, 0x1, 0x9, 0x7ff, 0xcfe, 0xec6, 0x0, 0x10000000, 0xfff, 0x100, 0x7fffffff, 0x9, 0xf2, 0x800, 0x2, 0x10000, 0x4, 0x5, 0xd6c, 0x8, 0x8, 0x55fb, 0x4, 0xd39a, 0x8, 0xffffffffffffffe1, 0x3, 0x1, 0x1, 0x1, 0xffffffff, 0x7, 0x3, 0x7, 0x8, 0x20, 0xff, 0x100, 0x3, 0x59b, 0x10001, 0xffffffffffff7fff, 0x800, 0xea39, 0x1f, 0x1, 0x4, 0x85b, 0x5, 0x2f, 0x3, 0x10000, 0x1f, 0x9, 0x0, 0xfffffffffffffffb, 0x5, 0x2, 0x0, 0x0, 0x3, 0x100, 0x7fff, 0x8, 0x1, 0xff, 0x0, 0x100, 0xfdf, 0xffffffffffffffdb, 0x100000001, 0x8000, 0x9, 0x80000001, 0x9, 0x7fffffff, 0x101, 0xb8ef, 0x9, 0xff]}) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000400)=@known='trusted.overlay.redirect\x00') 03:47:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x103001) ioctl$KVM_DIRTY_TLB(r2, 0x400caeaa, &(0x7f00000000c0)={0xffff, 0x1}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000009e, 0x0) 03:47:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 03:47:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x2, 0x1, 0x8000, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x20) 03:47:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000004c, 0x0) 03:47:46 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x8671, 0x4, 0x2, 0x6, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3}, &(0x7f0000000200)=0x8) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2e) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:47:46 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000001c0)="2f65786503000000000409004bddd9de91be10eeaf000ee9a90f798058439ed5ebb240162d60e2a2adc498bdcffb614354fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000c7c5a670e25fd4ace4d955774412030a01442bf7865d176f572783ce47d9e443e2b8465b73465f82b4f29520dc49b73a562f4eff0100000000000048496187d51c99bba420cc9b2c69dcf7df003c7b7cefb9d4f2ff0cf79de880009df4866c05315479d5644c36a7669a") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'user.', 'user.syz\x00'}) 03:47:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000004d, 0x0) 03:47:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x20) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x2, 0x40) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:47 executing program 3: socket$packet(0x11, 0x2000000002, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1402000025000002000000000000ad766da3f292c76022b5000000000000b471dd67cd6a9f89fef60f8859fa827095"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@dev}}, {{}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getegid() 03:47:47 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x0, 0x400) write$binfmt_elf64(r0, &(0x7f0000002b40)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x4, 0xfffffffffffff6a2, 0x3, 0x6, 0x3, 0x3e, 0x6, 0x11e, 0x40, 0x172, 0x9, 0x9, 0x38, 0x2, 0x8, 0x98fc, 0x2}, [{0x70000000, 0xffffffff, 0x8001, 0xa88, 0x10000, 0x0, 0xfffffffffffffffd, 0x4}, {0x6, 0x7, 0x5deb, 0x12, 0x7f, 0x4, 0x80000001}], "686346f72c45a612596df50f4b3a2acf472c2074fb062b1c242afe9823f4157349c4bf5a341ecc45a9165accedba18593d07e135e17645b690ba0488485f8c2c1d0eccd8d75afa40581289d73b5ff0f6eb3f0fb73b165eafb45227082ec420998b917c8afb127573abfa9c35927296c23c480a6259ffcff17b37154d3a402b39c15aef", [[], [], [], [], []]}, 0x633) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r2, &(0x7f00000000c0)=@known='user.syz\x00') accept4$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x80800) sendmsg$kcm(r2, &(0x7f0000002b00)={&(0x7f0000000480)=@hci={0x1f, r3}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000500)="53468a625f2b9496d99eb6dbeeb696cf8d9aa5dfefd71f8ef55fccb01dd9bc4ab26d45", 0x23}, {&(0x7f0000000540)="f580f7695e96cca2d62d348927a800838cd76ddea74580f155d3d09edc32b76ec6038c9c0aaee96b2ae701f99d7034ab999cfe7830e86f339478e2a46102ea9e63df555113c925dc3b9737fc9963aaee14eafbabe35edab8cd9cf1d56da6d6fbfaf882eff42a0a60d41a913cfb8f5d13f307b431ea83dbec99cde169e431d316d7013208130e70f9a926825c039e63197ec16a07706a986bad9acb008f2c9121a534a10b0ecf041aedb7d79c4dd3fb6110c3be3d2b39e6b21fee3d", 0xbb}, {&(0x7f0000000600)="b2bdcd37f3e607391843106d18e91d721bee299a50ec8c6c5fa9952ce2a1d108ebbb601ca4f46f7cf725e7294bd715d13b436e76", 0x34}, {&(0x7f0000000640)="2a224e394bc123ba8128a71275be43b9168567dac1c513938e762690111ab30e7f6267ce3f0a2c6827e57bff7b9142d0a751778f3d54d13cd1b82373f75805726ffb20139081ef4a657cf29b4bba906f432a68145805272d8119f033a689e2be9137053e435c035dcb9596d45411807aef90480493e6a2c2f93498a325c06f4771ed751f93cefc7a5fb803866cfc4d912eb02b0fff7cc5f4d2b4ebff271104860a06102cce9b61bdde9524af06aba7daad8cb73037f3261c9a3e25ab489c53860d9699f5f103296b22c058f89b485a1e5e43be66b337a8441ccda4764c836cdeb73e1f22484b254ff2d4e194e52adf8e138aa35fdef699e1ef", 0xf9}, {&(0x7f0000000740)="76ab3b7f6c478ceae496dc2ba5ba82f24afc98a5c097d0752ca91333ca8bc8dd2881961827d9284fa8118a77dfb049b1d52da4b3e368ab711a9acd05207dffdbc8f487dcde1e249be384de339bfc4dba4d950ee1", 0x54}, {&(0x7f00000007c0)="efa12a27cf393d9c8091aa87418c1de6b2c7c54a3dcc3c0f712a10e8788b340e3272cc83ab5d4e216d4232b9c6fae0e51cd532c2d57a67fa9b2fc1cb1d30dd175d208c6c6daf0a519f84e52c36016145a4f2a3ddc8df7118cb557925cdabe642a864cb35c568cdaa0faab28e05b4655a53220c60ccf295381e2e38907e916e6ab4862dffb8c936b360adcc32ddf94adc8c48", 0x92}, {&(0x7f0000000880)="1832a5a6a854977b4fb0e745a5a54ec3b20b53a3ffec9a49267f383e2bdf86c57310f0d0f682ba0a84863544c281e3b02707ca46b18727d18b73b6bfb34c6848e68758ffd10f89cf306aea9568912efd93cddae302c2b911138dfed754bc6cd6f1dbdd1c80bc6303d403054de6ba99b06ede6bc3096c8f3803af5eddb1c4e4a9f8e14f123ed4649dc6f4f7a877da59d9b4f3cc218bdd1e68dbf2034e3d9e35ab90d94e9dfe8402601872702271a66e948d9edbf2f435333a1950f0a8de10d7d2eaa2a69c5a1455706069769ea91ad15ee1d0a4bf553738b605b1", 0xda}, {&(0x7f0000000980)="6728015b", 0x4}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="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", 0x1000}], 0xa, &(0x7f0000002a40)=[{0xa4, 0x110, 0x44, "612726d26cd25e43fd2ffea74de83674c4cbd1b86d9df2d8b1ef457c683ff385ea200bacd365b1d406f517890caee76d860ddc5a4aa140d5a9ea2c0daee37d2271a88696130fba2119a1c782513d0fe949744fa9dea7ab75b2479fa7371a0c80c64362e6790693eb4e4de6de03386b39b22b33249b97586e013d4d9a97e31781cade066cf1f2159d3cea968cf159e82691e7f7b210"}], 0xa4}, 0x4) stat(&(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000002c0)={0x0, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="680000007d02000000490000001680ffffff00010000000200000000000000000000800400000008000000ff7f0000000000000300c4233a0900757365722e73797a000100000900757365722e73797a000a006d696d656d747870652e", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0x68) 03:47:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(0x0, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[0x16, 0x1]}) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x7, {{0xa, 0x4e21, 0x1c798000000000, @loopback, 0x20}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x7}}]}, 0x10c) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x6) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0245628, &(0x7f0000000100)={0x2, 0x1, 0x9, [], &(0x7f0000000040)=0x8}) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x7, 0x6d, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x9c9, 0x800, 0x6, 0xad2}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) 03:47:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000105, 0x0) 03:47:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x4e22, @local}}, 0x3, 0x1734141c, 0x1ff, 0x6737, 0x82}, &(0x7f0000000200)=0x98) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:47 executing program 3: open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7d) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) 03:47:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fcntl$addseals(r0, 0x409, 0xc) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x7, [0x1f, 0x1000, 0x4, 0x80, 0x7, 0x0, 0x0]}, &(0x7f0000000080)=0x16) io_setup(0x3, &(0x7f0000000240)=0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) close(r3) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x80) io_submit(r2, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd(r4, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x84) 03:47:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', 0x0, &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000121, 0x0) 03:47:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$inet6(r0, &(0x7f0000000000), &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r3, 0x401, 0x5, [0x3, 0x5ce, 0x7, 0x4, 0xffffffffffffff80]}, &(0x7f0000000200)=0x12) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfdffff7ffffffffc) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f00000000c0)) 03:47:47 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', 0x0, 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000001c0)=@known='system.sockprotoname\x00') ppoll(&(0x7f0000000080)=[{r0, 0x1000}, {r0, 0x1124}, {r0}, {r0, 0xc}, {r0, 0x2}, {r0, 0x40}, {r0}, {r0, 0x1}, {r0, 0x1400}], 0x9, &(0x7f0000000180), &(0x7f0000000200)={0x842}, 0x8) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000100)) 03:47:47 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") open(&(0x7f0000000000)='./file0\x00', 0x400, 0x100) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='user.syz\x00') 03:47:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') r1 = getpgid(0x0) ptrace$getregset(0x4204, r1, 0x207, &(0x7f0000000080)={&(0x7f0000000100)=""/253, 0xfd}) 03:47:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100025bd7000ffdb6e0f28890d8c4a16df250f00000008000400c0000000080006002000000008000500010400003000020008000900335200001400010000000000000000000000000000000001080002004e21000008000300030000000c000300080008000700000000a6034e90e3d2f9e1c09658ee2c9d25bd4ddae378c59b182eed6dc8f5f6a74543a6"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r6 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000000)) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) r10 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) r12 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) fsetxattr$system_posix_acl(r6, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {0x1, 0x4}, [{0x2, 0x0, r7}, {0x2, 0x1, r8}, {0x2, 0x5, r9}, {0x2, 0x4, r10}, {0x2, 0x7, r11}, {0x2, 0x4, r12}, {0x2, 0x2, r13}, {0x2, 0x2, r14}], {0x4, 0x1}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x64, 0x2) 03:47:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x0, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:48 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000a8, 0x0) 03:47:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0xec1, 0x5, 0x6, 0x8, "99cdf1335a45583ba799f1d4e10fa6008ae5070e2803b434e9448d5f7efa4e8d"}) creat(&(0x7f0000000040)='./file0\x00', 0x8) 03:47:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140), 0x4) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.origin\x00') accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x2b8, 0x80000) 03:47:48 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:48 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x852, 0x24100) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:48 executing program 3: ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:48 executing program 3: ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000100)=@random={'trusted.', 'user.syz\x00'}) 03:47:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x100000000001) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x1, "7166cb5eb6ad737f"}) 03:47:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, 0x0) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:48 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$kcm(0x29, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x100000001) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000147, 0x0) 03:47:48 executing program 3: ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') 03:47:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000280)=0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in6}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:47:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$RTC_AIE_ON(r0, 0x7001) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:48 executing program 2: getpid() r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0xfffffffffffffd05, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x9, 0x7c795777, 0x1, 0x4, 0x0, @stepwise={{0x3, 0x99}, {0xe078, 0x1}, {0x8, 0x5}}}) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:48 executing program 3: r0 = syz_open_dev$video(0x0, 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) fremovexattr(r0, &(0x7f0000000180)=@random={'btrfs.', 'user.syz\x00'}) 03:47:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') 03:47:48 executing program 3: r0 = syz_open_dev$video(0x0, 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000007, 0x0) 03:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.SMACK64\x00', &(0x7f0000000140)='\x00', 0x165, 0xb19c57d999460fe7) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f00000000c0)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:49 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed5540000424ada75af1f02ac06edbcd7a071fb35331ce39c5a000000008f2facf3d5aa78bfee9b9798f38b14cc5ed59da40c15ec118287ec9001573382eb81f457ae743df1aaf21b3e77f02b257680b6fec372a7a3e25e") write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000180)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100), 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000300)={0x1, 0x40, {0x0, 0x1, 0x6, 0x2}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) fsync(r6) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000002c0)) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={'bridge_slave_0\x00', {0x2, 0x0, @broadcast}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000380)) dup2(r6, r5) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r2, 0x10, 0x0, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @multicast2}, 0xc3}}}, 0xa0) ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000380)={0x7, 0x1ff, 0xfff, [], &(0x7f0000000240)}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x6, @remote}, 0x2, {0x2, 0x4e20, @broadcast}, 'ip6_vti0\x00'}) fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:49 executing program 3: r0 = syz_open_dev$video(0x0, 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x3}) fremovexattr(r0, &(0x7f0000000140)=@known='trusted.overlay.nlink\x00') fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) 03:47:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000007c, 0x0) 03:47:49 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x9}}, [0x8, 0x8, 0x8, 0x3f, 0x3, 0x547d, 0x9d53, 0x5, 0x6, 0xffff, 0x0, 0x7, 0x1, 0x100000001, 0x3]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000440)={r1, @in={{0x2, 0x4e23, @local}}}, 0x84) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf2a3e71, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000400)=@random={'trusted.', '}\x00'}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x7, @local, 0x7}}, 0x2, 0x5}, &(0x7f0000000200)=0xfffffffffffffe83) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000240)}, &(0x7f0000000380)=0xc) 03:47:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:49 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) clock_gettime(0x7, &(0x7f0000000180)) r4 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:49 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:49 executing program 4: mq_open(&(0x7f0000000080)='\x00', 0x2, 0x0, &(0x7f0000000100)={0x6, 0x2, 0x10001, 0x3, 0x4e8, 0xeaa, 0x6a, 0x3}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:49 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000004f, 0x0) 03:47:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = dup(r0) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x4, 0x81, 0x1000, 0x0, 0x5, 0x1f}) 03:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000080)=0x3, 0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:49 executing program 3: syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$TIOCSCTTY(r0, 0x540e, 0x3) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x1b}, 0x10000, 0xb1, 0x1, 0x100, 0x3, 0x4000020, r1}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000140, 0x0) 03:47:49 executing program 4: set_robust_list(&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000080)}, 0x4}, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="2765786500000000000409004bddd1de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f0000000180)=@known='user.syz\x00') r2 = geteuid() r3 = getgid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x40001, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x38bf8cf64b029841}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other='allow_other'}], [{@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x0, 0x3e, 0x33, 0x0, 0x38, 0x36, 0x33], 0x2d, [0x0, 0x37, 0x77, 0x66], 0x2d, [0x34, 0x34, 0x77], 0x2d, [0x37, 0x77, 0x33, 0x71], 0x2d, [0x64, 0x77, 0x32, 0x64, 0x0, 0x39, 0x33, 0x61]}}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_gt={'uid>', r4}}]}}) 03:47:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x18, 0x4}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000140)={0x3, 0x3, @start={0x4, 0x1}}) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:49 executing program 3: syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80002, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:49 executing program 3: syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:47:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') sendto$inet(r0, &(0x7f0000000100)="ccb2242361ff322452691252b8b4ee6f4f347737ab513209615546109ebdfa8ad4d8b6a8023e37fffea846c706658a19db41d1540cbc5ec3ff88a350d99e42776088dd2d803751e82e75705ea1bf61372cc2a2c31e7f63c94222116cc78ecce1716dfab6e87b99181e7941f6b613537fb0dff04e4eea32cd41eab56811649fbe701b54d3361f2c2800515c7f5a3aa3e0e8ed14c3b7b4d305003b02ec811c76abbab29e86137204d2f9c69ae0433f92ec4d1be26b5ae8d3d7ab40a5fb92ab2e485ae59c3e", 0xc4, 0x800, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x401}, 0x10) 03:47:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031d", 0x9}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:50 executing program 2: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'bpq0\x00', {0x2, 0x4e22, @remote}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000180)=@known='user.syz\x00', 0x0, 0xffffffffffffff40, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x369f10e7, 0x1000000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x1}, &(0x7f0000000140)=0x8) close(r1) 03:47:50 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000440)=""/4096, &(0x7f00000002c0)=0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000300)="0004833813ca402cb07d35774e76046e8bd1003bdfd1fbf78592913aa36df0a27caea491458f420dc716e3b57d1600962456bffdeb35103e45b367621b28df6f7b0450c0fca6ec3292a5aa295f67aa141d9452d61a5f59f0e4e2855d13782406fe37e3787c40e78f0933c1f5dc54f252fd8cc53210d86413ee440dc1f58091157fb1fc9781bc7fae2cb24408dadc54afc02d76b190c420e2d5bc4e21a86f144e4496d423f77b2ea70000000000000000000000000000000ec90ac44fd3261c491b50036739388a8258c0acd7c805dd0a84c8f145eb2b50bfac58b7e44770a180deeb7706d068dfaacb754bfc2d559157b9283ef885d67581cd691c5a08c7e00aa279ba13e2b111e16d2a652b525d961e55b80a8b0f", 0x115, 0x80000000000000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x80000001}, @window={0x3, 0xffffffff, 0x4}], 0x2) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001440)=0x8, 0x4) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x8001, 0x20000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3ff, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x20000000000, @mcast2, 0x10000}}}, 0x84) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) 03:47:50 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 03:47:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000003d, 0x0) 03:47:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000000c0)) 03:47:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="757365722e2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed55418d9f6e595d448ddfa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00"], 0x0, 0x0, 0xfffffffffffffffd) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') io_setup(0x80000001, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="2850336f8f7c747b941a2e2fea98b315b16e4d6fc16b405bd98f1802ae475a5ab20c2a5c3a51fa6dc73ed059983b4563263b4e8672b85ba5aedb75b8511038f43fab6bbd924aa532475f20e34b0f", 0x4e, 0xbc4, 0x0, 0x0, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000001c0), 0x0, 0xa6, 0x0, 0x1, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000240)="0565c3353947d9b9476418eab6303eb1274c6558d6c4ed07bb4bbbc94bc1a830dc1399ed857a3ad9e36c8a465e5ae83f047e6b509bfb5e96e120a964", 0x3c, 0x800, 0x0, 0x3, r0}]) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f00000001c0)={0x8, 0xf, 0x4, 0x60000000, {}, {0x4, 0x9, 0x606, 0x2, 0x0, 0x2, "887e77ca"}, 0x2, 0x3, @userptr=0x100000001, 0x4}) 03:47:50 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 03:47:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000014a, 0x0) 03:47:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/237) socket$inet6_udplite(0xa, 0x2, 0x88) 03:47:50 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 03:47:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x88, @empty, 0x4e22, 0x1, 'none\x00', 0x5, 0x7fffffff, 0x6a}, 0x2c) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa2", 0xe}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x6, 0x80) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:50 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip6_flowlabel\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x100000001, 0x81000001, 0x628d, 'queue1\x00', 0xffffffff}) fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x501000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:50 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x0, @pix_mp}) 03:47:50 executing program 4: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, 0x0, &(0x7f0000000080)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 03:47:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000a1, 0x0) 03:47:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd5de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a000000008bc4320f074ad2400c3ac9a881640dc94c60ab65e0e9c231f3f3cab12866ee9d") poll(&(0x7f0000000040)=[{r0, 0x90}, {r0, 0x80}, {r0, 0x52}], 0x3, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) write(r0, &(0x7f00000002c0)="7338853b76a435f907926584be4f234f3198d18b2953dd84f7c0dbc5b424756b937450265a10b633a0a39c2a899790eeddc79009ccf77e64c6c28a4e345167e1f2a51e88930fe44ff3fb6dcc81c6d82b2f2479e27ed81fa070a4d5b69513b9cb674406550aafe92efbbc5d9a61cdbb4783a7761be8887d7364e9e0c782313397a5ddf0c810c7787dc77f8c118700591ececf29152470b3f9c9bc69a61e8e9c144e6ae496f45280531430fe3942afbf8fd0080a92907f2a9e4f92be01a6147d5ac7a66263063c97", 0xc7) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="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") ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) 03:47:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {&(0x7f0000000440)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0xb2, 0x400, {"86469132c1b095c0cfecce562b750948"}, 0x4, 0x100000000, 0x8001}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000540)={0x11, 0x10, 0xfa00, {&(0x7f0000000400), r4}}, 0x18) r5 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000003c0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="e039724dffa07b6a6bc2156c428ddfe206e5aede40d61387a4d01082a68c8f634ddf4740a7ba771d1c", 0x29}, {&(0x7f0000000140)="734ba9c69bafec9858df3d8b50393417283c8d3a0643eb4ace06f1efd32869e4676799aec8ec988862fe8a5818dd5365d8786c52f2800dc447f232251522a6c06f6f7080ed5b42746400fb24f5bbe8938bf3c4b47c758380199bea064650dde3802d76e8784de4fa2f79bbe3efbe00c111d0ca0b7025e0effdbd8c2f311ed59f4e375b04a5a9f96c41b0c5f213fba6572dec7f3454e90c2c150331da06d9854171f4e329b242b46df2cf15b7631ed3aa4879e5fc05711c12ee1a4af60d2a5a8b8e396bb1ff754fc269d470981d636c79c73bac2410dfafa15c884072", 0xdc}, {&(0x7f0000000240)="02b85f82d7b649feb8a094bf85e6c767ebe1716fc5a7040766c975a907283246f094a10d04b0efe7999f313e25e5e246", 0x30}, {&(0x7f0000000280)="cac5e4d27d5bea9f33723b4b9d20e4011d78cf455bcbc54959334a003b5adea9e5f50e1731fd52596eec4ad4eac366d8483c7a2c7d1d8cc5228c978a154cbdaaef758cbf06d783dc02b1c8bb39882b37922095eb058d10a23f37ba11dd350a7b353f66fe463c5a8a53680fb2c1814e659c6a7105cba46ae687b92d3316fd786759a2db3c8a3b29bd239df7a6b304390fc3c7d0a85af5f20e28224058e1e35ac2758defee01442e6ed3ba063f65c6bb6a5d", 0xb1}], 0x4, &(0x7f0000000380), 0x0, 0x8c0}, 0x800) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:50 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x0, @pix_mp}) 03:47:50 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0245628, &(0x7f0000000140)={0x81, 0x3f, 0x4, [], &(0x7f0000000100)=0xfed}) ioctl$VIDIOC_S_EDID(r0, 0xc0245629, &(0x7f00000001c0)={0x4a12, 0x9, 0xe44a, [], &(0x7f0000000180)=0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:51 executing program 3: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x0, @pix_mp}) 03:47:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa28300", 0x10}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:51 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_names\x00') fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') memfd_create(&(0x7f00000002c0)="2a656d307070703073656c696e75789b707070312873717374656d656d9b834075f7b49976c9773028217d242100c5f2fb5fe9058928255f8a555556a6431925c2df998f41e67219759450e93bfe69e0a5791763c4822648448569671d1c7ac83a37b507cab67ce6bee7373fef3d54ef804468aeda8360b96c31e344f5ca2a7a0bc8de578e8687a06dfdfc45a71232343566f0cc885ee6860a4bd0fc045b36936a52cd832b20fc1e3f603003ae015269227049266092774e8eabece933668b0ca5fe3930a09c7541b2c24264bee7d4b73b7357465ea0a76005df9a708dcead94e1d1b1f495e1bd394b0f", 0x2) 03:47:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa2830020", 0x11}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000b5, 0x0) 03:47:51 executing program 3: dup2(0xffffffffffffff9c, 0xffffffffffffff9c) 03:47:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x41d) connect$vsock_dgram(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0xfffffc1d) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') r1 = memfd_create(&(0x7f0000000040)='user.syz\x00', 0x5) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000140)={0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x80, @tick=0x21f7, 0x3, {0x2, 0x8}, 0x17d, 0x1}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x5) 03:47:51 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000180)={0xaafc, 0x8f9, &(0x7f0000000240)="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", &(0x7f0000000400)="54298b7391dc156f721e3b6211d1eaeddad3e83105e951c279060077968575cd0ec6bc1b5e81c3a77515ec82906e6449ad0975fbeab12645f3a7cda9b094874fdd32f0e6d3d96a27113f8637449eb90e4f1deba7ab07b9745bbf5f929db1112f3a0474c94968210ac0780b7f7450", 0xc1, 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x8040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x263, 0x1) sendfile64(r0, r0, &(0x7f0000000040), 0x6a) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:47:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x4, 0x800, 0xb25d, 0xfff}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffff1f, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}, 0x1, 0x8001a0ffffffff}, 0x0) 03:47:51 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)="2f65696500000000000409004bddd9de91be10eeaf43bed554fa0742080034b5de098983000000000000000000f4345a87bd34342ff08da0be47b613918d15760471000000000000000000060000000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x9, 0x19, 0x5, 0x1d, 0x6, 0xa8, 0x5, 0x151, 0xffffffffffffffff}) 03:47:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000151, 0x0) 03:47:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000580)={0xbe, 0x7d, 0x1, {{0x0, 0x94, 0xc3, 0xffffffffffffffc1, {0x0, 0x4, 0x3}, 0x200000, 0x2, 0x4, 0x4, 0x10, 'proc/em1system{*', 0x9, 'user.syz\x00', 0xf, '\\vmnet1!trusted', 0x39, "2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00"}, 0x15, 'security.SMACK64MMAP\x00', r1, r2, r3}}, 0xbe) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='user.syz\x00', 0x9, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x401, 0x5, 0x6, 0x1, [], [], [], 0x7, 0x4, 0x1, 0x7fff, "7d982816a713ed554e3aa569d20b1364"}) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x281, 0x2) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(0x0, 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:51 executing program 4: fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7ce, 0x185101) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x6, 0x7, 0xffffffffffffc7e4}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r2, 0x1, 0x40}, &(0x7f0000000580)=0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r1, 0x100000302, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x250}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x42, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000180)=""/66}, &(0x7f0000000280)=0x50) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x7, 0x80000000, 0x1000, 0x800}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x3c1}, 0x2) 03:47:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000080)='/dev/media#\x00', 0x4000000000002) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:51 executing program 3: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000400)=0x6e, 0x80800) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000440)={'sit0\x00', 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000301ffff001c7e4e8c0000000000ae1e"], 0x14}}, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x19, 0x1, @thr={&(0x7f00000000c0)="50234d83003bccf7e3fc78f5a2ce78f6c3571b765b5ce1ac15f4415c542e3b3d7b8e764749dec77079b362083330a214504740506c07cebb1e1d8b7406502b95ab7b8983c9adb9351c1acb24765aea355f80dfba152a7be06f6e8f6bb9395bd28367cc", 0x0}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{0x0, 0x1c9c380}, {r3, r4+30000000}}, &(0x7f0000000300)) socket$inet6(0xa, 0x6, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000680)=0xe8) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000480)={0x1}, 0x0, &(0x7f0000000500)={r5, r6+30000000}, 0x8) recvmmsg(r1, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 03:47:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000006d, 0x0) 03:47:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x2ad, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000cd, 0x0) 03:47:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000100)=""/165) fchdir(r0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:51 executing program 4: socketpair(0x19, 0x6, 0xfff, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000380)="6e00000000006c4900008a39bf544d38e75a496031b70c6d1f290000000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0e05403, &(0x7f0000000100)={{0xc5d83e18fcb62198, 0x1, 0x4, 0x0, 0xab7}, 0x6, 0x8, 'id1\x00', 'timer1\x00', 0x0, 0x2b08b018, 0xba7, 0x1, 0x6}) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ifb0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x3a, 0x5, [{0x1, 0xbb41, 0x2, 0x1}, {0x6, 0x3, 0x6, 0x91b4}, {0x6, 0x81, 0xfff, 0xa9}, {0xffffffff9a1f5722, 0x73ab, 0x6, 0x1}, {0x60d, 0x0, 0x7, 0x3}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "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", 0x21, 0x9, 0x3, 0x7, 0x5, 0x0, 0x1}}}, 0x120) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0e05403, &(0x7f0000000740)={{0x3, 0x3, 0x81, 0x0, 0x1}, 0xfff, 0x74, 'id0\x00', 'timer0\x00', 0x0, 0x3ff, 0x8, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, &(0x7f00000006c0)={0x0, 0x8, 0x0, 0xda, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:47:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000000c0)) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000100)=@known='user.syz\x00') 03:47:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0xfffffffffffffef5, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:52 executing program 2: prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0xc0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000004) write$P9_RMKDIR(r1, &(0x7f0000000040)={0xfffffffffffffff2, 0x49, 0x1, {0x90, 0x0, 0x3}}, 0xffd0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x8) 03:47:52 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000300)) 03:47:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000ee, 0x0) 03:47:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(0x0, 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:52 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x321001, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000100)=0x81) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001280)={0x2, 0x1, &(0x7f0000000180)=""/26, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/158}) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) 03:47:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x800) read(r0, 0x0, 0x0) 03:47:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x445, 0x2) fremovexattr(r0, &(0x7f00000001c0)=@random={'security.', ']*-user\x00'}) 03:47:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000002c0)=@known='user.syz\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/164, 0xa4}], 0x3, 0x0) 03:47:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) getpeername$unix(r0, &(0x7f0000000200), &(0x7f0000000080)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x80000001) [ 358.659313] IPVS: ftp: loaded support on port[0] = 21 [ 358.935737] device bridge_slave_1 left promiscuous mode [ 358.941271] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.047009] device bridge_slave_0 left promiscuous mode [ 359.052650] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.151777] team0 (unregistering): Port device team_slave_1 removed [ 359.169077] team0 (unregistering): Port device team_slave_0 removed [ 359.181853] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 359.242907] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 359.341812] bond0 (unregistering): Released all slaves 03:47:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = memfd_create(&(0x7f0000000080)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="f20f090f20e06635040000000f22e066b80500000066b96949d8a70f01d9660f0d8b1d1d2e0f001c0f21c20f090f20d86635080000000f22d8f2266666d4bb65650fc79b2695", 0x46}], 0x1, 0x1, &(0x7f0000000180), 0x0) 03:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) userfaultfd(0x800) r1 = fcntl$getown(r0, 0x9) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r1) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') [ 360.304554] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.319007] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.327482] device bridge_slave_0 entered promiscuous mode [ 360.370791] binder: 17432:17434 transaction failed 29189/-22, size 0-0 line 2834 [ 360.405766] binder: undelivered TRANSACTION_ERROR: 29189 [ 360.426267] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.432712] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.440090] device bridge_slave_1 entered promiscuous mode [ 360.531108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 360.612320] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 360.746052] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 360.791205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 361.000423] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 361.007902] team0: Port device team_slave_0 added [ 361.050485] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 361.058011] team0: Port device team_slave_1 added [ 361.101616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.146282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.190399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 361.197675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.213847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.237561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 361.244592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.252708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.588197] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.594555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.601326] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.607704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.614993] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 362.475404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.498264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.584198] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 362.669853] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 362.676154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.683126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.769299] 8021q: adding VLAN 0 to HW filter on device team0 03:47:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000b4, 0x0) 03:47:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x722, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x3, 0xffffffff00000001, 0x0, r1}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0x31d}, 0x2) fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x232, 0x800, 0x8, 0xffffffffffffffe1, 0x4}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @loopback}}, 0x251, 0x7}, 0x88) fallocate(r0, 0x40, 0x8001, 0x1) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x21) 03:47:57 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 03:47:57 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000080)={0x3}) 03:47:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'os2.', 'user.syz\x00'}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 03:47:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') poll(&(0x7f0000000100), 0x0, 0x8) 03:47:58 executing program 3: r0 = socket$packet(0x11, 0x2000000002, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x410002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1402000025000002000000000000ad766da3f292c76022b5000000000000b471dd67cd6a9f89fef60f8859fa827095"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@dev}}, {{}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getegid() sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="4047f0096aed1023d30a812cdeb5e8a06b90962e3af7b199b9e07994a91cf3a16868cb8b042c3dddaf3549d42c50eb2fec", 0x31}], 0x1, 0x0, 0x0, 0x4000}, 0x4008000) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 03:47:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:58 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) fsetxattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="6f73322e2f65786500000000f10309004b01000400000000000000e9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a0059f56f13ce161055f19c82d9858e22142659620597d37d11d4b9827c04cb26d5cce9f5bae635542e65d488aadacb5476c23a5a2cb36af03c660779a7003eba513e94755946fc6c7198daa8bdfd263e0abb5120e4ae5dd7da2c0a"], 0x0, 0x0, 0x3) fremovexattr(r1, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00') 03:47:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000b0, 0x0) 03:47:58 executing program 2: getpgrp(0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp6\x00') fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') 03:47:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r4 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) 03:47:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 03:47:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:59 executing program 2: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x9, &(0x7f0000000040)='user.syz\x00'}, 0x30) r3 = syz_open_procfs(r1, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r3, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fcntl$setown(r2, 0x8, r0) fremovexattr(r3, &(0x7f00000000c0)=@known='user.syz\x00') fdatasync(r3) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) 03:47:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000100)=@random={'trusted.', 'eth0\x00'}) 03:47:59 executing program 3: socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=@encrypted_update={'update ', 'default', 0x20, 'user:', ':^ppp1trustedwlan1selinux'}, 0x2e, 0x0) 03:47:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000e8, 0x0) 03:47:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:47:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) pipe(&(0x7f0000000080)) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:59 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="05b349767d64"], 0x6}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 03:47:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x80) 03:47:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 03:47:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x0, 0x427900b5, 0x80000000}) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) setsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000080)="c87d45", 0x3) 03:47:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40000, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x1, 0x0, 0x0, 0x2, 0x41000000, 0x9, 0x3}, 0x20) [ 364.662955] ptrace attach of "/root/syz-executor3"[17765] was attempted by "/root/syz-executor3"[17766] 03:47:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x5) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x20) 03:47:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x17, 0x28, 0x3, 0x1e, 0xa, 0x2, 0x4, 0x1, 0xffffffffffffffff}}) 03:47:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000092, 0x0) 03:47:59 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:47:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x0, 0x2, {0x0, 0x5}}, 0x20) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:47:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@ethernet={0x0, @remote}, {&(0x7f00000002c0)=""/4096, 0xfffffdf8}, &(0x7f0000000040), 0x1}, 0xffffffffffffffec) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0xffffffffffffa6af, 0x8, [0x38, 0x3e]}) 03:47:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$inet6(0xa, 0x0, 0xffffffffffff0000) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) write(r0, &(0x7f00000001c0)="bbb4fa5737d3907f9ddc1bce583af57a8da848435c08e8e771a2c0d5d8a3bc8eebad4b50bf58a86a21577969bd015cd609807b28402c3ad4e06635a8e388fc48256632204fc16d8fd00ae85e51d01eaffa0f053287a72a3dbbac05df85204824bd638e662ced5802ee868f25d2c0233c3fe42371c23c504b670f87c3fe7a97b12f060c72b6663b8ef665c55f286d7be5ef33ab725dde9a061899be762ad9dcfee0f639636bde8bb1ae8553538a6282f69a17bda6d3", 0xb5) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:47:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000ce, 0x0) 03:47:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x7) 03:48:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000080)=""/93, 0xfd10) r1 = dup2(r0, r0) getdents(r1, 0x0, 0x0) 03:48:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fcntl$setsig(r0, 0xa, 0x20) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000001) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000106, 0x0) 03:48:00 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='cpuset\x00') fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) flock(r1, 0xa) 03:48:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000180)=@known='user.syz\x00') 03:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) mq_notify(r0, &(0x7f0000000340)={0x0, 0x21, 0x5, @thr={&(0x7f0000000200)="bf82bdf5b2a340a9da47b50f2ac309b3f6741da68ce4bf1b88cb7e1372e07018508b3b7fea62883f718f12a9999ac9baf7c2b1f531bb22f26f24b4fccd0490a4983409a35596519eef0b4d2eaf8b5ec9f12fb7aa9af469bae78384bea5fb47c24455f13122f9ce7cefee52b6cc8d1441d28f4e0c59e10b9c4aacd42684141752e52cb1dfeccd8ca0d38a4fc598448413324e", &(0x7f00000002c0)="2ab7a86532bb029d0c767d64f94743cad0c6001db699382b751b35cc71d4432557e44a24ab598026e2ddee31833a149def0d600415f981b36d1a9d2dfd4e2188f345536318a1c58a8d6212abc0c44c7b7a93bf9f1b52"}}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$TIOCCONS(r0, 0x541d) fdatasync(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000400)=""/111, 0x6f}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000004c0)={'gretap0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000640)={0x0, @speck128}) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000001c0)) 03:48:00 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60b4090000302f0000000000000000000000ffffe0000002ff02000000000000000000000000000121009078f1ff040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 03:48:00 executing program 0: r0 = dup(0xffffffffffffff9c) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000240)=0xffff, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'%route\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x2, &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x1d0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r5 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r6, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4e}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x894}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c03}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffb}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0xc000) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000200)={r4, 0x0, 0xce, 0x0, 0x3}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) fstatfs(r2, &(0x7f0000000140)=""/189) 03:48:00 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x201, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000100)=@random={'btrfs.', 'ppp1[vboxnet0\x00'}, 0x0, 0x1e7, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000d00)={0x0}, &(0x7f0000000d40)=0xc) sendmmsg$unix(r3, &(0x7f00000055c0)=[{&(0x7f0000000100)=@abs={0x1}, 0x6e, &(0x7f0000000380), 0x0, &(0x7f0000000e40)=[@rights={0x10, 0x1, 0x1, [r3]}, @rights={0x20, 0x1, 0x1, [r2, r1, r3, r2, r3]}, @cred={0x18, 0x1, 0x2, r4}, @rights={0x14, 0x1, 0x1, [r1, r2]}], 0x5c, 0x1}], 0x1, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:00 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000030, 0x0) 03:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000080)=@random={'trusted.', 'keyring{,\x00'}) 03:48:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000e0, 0x0) 03:48:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000540)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 365.932970] kernel msg: ebtables bug: please report to author: Wrong len argument [ 366.032400] kernel msg: ebtables bug: please report to author: Wrong len argument 03:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, 0x0, &(0x7f0000000100)="a82d766d6e65743065746830236d643573756d2173797374656d5c656d3070707030707070306e6f6465766574683100", 0x30, 0x7ffffffffffffc) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:00 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000140)={r1, 0x3}) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') write$P9_RSETATTR(r0, &(0x7f0000000180)={0x7, 0x1b, 0x1}, 0x7) 03:48:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x800, @mcast2, 0x80000000}, 0x1c) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) tgkill(r3, r4, 0x800000000000026) getsockopt$inet6_mreq(r2, 0x29, 0x2, &(0x7f0000000200)={@local}, &(0x7f0000000240)=0x14) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000500)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r2, r5, &(0x7f00000001c0), 0x8000fffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 03:48:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='\x00', 0x7) r4 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) r5 = getpgrp(0xffffffffffffffff) sched_setscheduler(r5, 0x2, &(0x7f0000000140)=0xa374) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) r7 = getpgid(0x0) setpgid(r6, r7) 03:48:00 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x88500, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x959e, 0xffffffffffffbe83}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x2000)=nil) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000001c0)="2f65786500000000000409004bddd90ee9a94fcf2ddb4ed89e1b6e2490f60f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x7, 0x10, 0x1, r2}) fremovexattr(r2, &(0x7f00000000c0)=@known='user.syz\x00') sendfile(r3, r3, 0x0, 0x10001) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x12200, 0x0) 03:48:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000055, 0x0) 03:48:01 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) 03:48:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:01 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioperm(0x3b, 0x10000, 0x3) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000140)=""/103) fremovexattr(r1, &(0x7f0000000000)=@known='user.syz\x00') 03:48:01 executing program 3: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000002280)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x4, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) 03:48:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000014b, 0x0) 03:48:01 executing program 4: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/softnet_stat\x00') fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x0) 03:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendfile64(r0, r0, &(0x7f0000000080), 0x1318) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:01 executing program 3: sched_setattr(0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) 03:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:01 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x1) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:01 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/58, 0x3a}], 0x1) 03:48:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, 0x0) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@random={'security.', '!\'uservmnet1vboxnet1\x00'}, 0x0, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x80000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x64) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)={0x3, 0x100000000}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000e2, 0x0) 03:48:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x41, "03a42df467a4cebcc9f1a1b87a66c02288707f11bc335309098d11073d52e8cda716b2b42c41dfaefb752b7bb48e12a8ae6c4d5834246be6f165f3e8541b61c346"}, &(0x7f0000000080)=0x49) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x4, 0x30, 0xffffffffffffff42, 0x200}, &(0x7f00000001c0)=0x18) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r2, 0x91, "1e82cf53f4c6383e22b6636a0a2fd9f872459b7ba0a839de9da11660b8178d621d2fba17483bc5478afd40c305e953e271f04f5436f6c663fe1a06182812a0b974587cf228db176d4b19d1e8a17c141d21fb5479c5335837f682dfff1a08b1254e8422aef383f8f7d69dcf21fab10284e976883301dc3444619afa597e15c0499acce8c15d40b39f8951a08cd2e387bd95"}, &(0x7f00000002c0)=0x99) 03:48:01 executing program 3: r0 = socket(0x10, 0x1000000802, 0x0) sendmsg$nl_route(r0, &(0x7f0000005fc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_getnetconf={0x14, 0x2e, 0x1}, 0x14}}, 0x0) 03:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:01 executing program 2: r0 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='cpuset\x00', 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r0, 0x10000000000, 0x2, r0}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:01 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x30, r3, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) 03:48:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:48:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, 0x0, &(0x7f0000000040)='\x00', 0x7f, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000007e, 0x0) 03:48:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x0, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:02 executing program 0: socketpair(0xa, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000140)={0xffffffffffffff00, 0x5b99bf91, 0x1358}) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000180)=0x734d) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) syz_open_pts(r1, 0x80) 03:48:02 executing program 2: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) preadv(r0, &(0x7f0000002580)=[{&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f00000012c0)=""/191, 0xbf}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000002380)=""/185, 0xb9}, {&(0x7f0000002440)=""/154, 0x9a}, {&(0x7f0000002500)=""/68, 0x44}], 0x9, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:02 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000200)='maps\x00') fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x0, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x3, "3bcb73bfbc3b4ba6"}) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000ba, 0x0) 03:48:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00'}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 03:48:02 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x2, 0x77d492a31e34ef1a) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x1f004, 0x9, 0xffffffffffffffc0, 0x2, 0x0, [{0xccab, 0x1b2, 0x386, [], 0x6}, {0x0, 0x0, 0x100, [], 0x80000001}, {0x8, 0x3ff, 0x8, [], 0xffffffffffffff2f}, {0x6, 0x3, 0x7, [], 0x40}, {0xb8, 0x5, 0x1, [], 0xe45}, {0x6, 0xfffffffffffffffe}, {0x8, 0x0, 0x1, [], 0x6}, {0xffffffffffff17a1, 0x1, 0x81, [], 0x5}, {0x3, 0x2, 0x9, [], 0x6}, {0x4, 0x1, 0x8, [], 0x5}, {0x800, 0x1c, 0x5, [], 0x8}, {0x1c3f, 0xcf, 0x6, [], 0x4}, {0xe18c, 0x3f, 0x264, [], 0x4}, {0x10000, 0xfffffffffffffffe, 0x2, [], 0x1}, {0x101, 0x1, 0x7, [], 0xfff}, {0xff, 0x7, 0x3, [], 0x40}, {0x4, 0x6, 0xffffffff00000001, [], 0x1}, {0x3, 0x0, 0x329a, [], 0x2}, {0x800, 0x7, 0x81, [], 0xb3b}, {0x3, 0x8000, 0x1, [], 0x8}, {0xfffffffffffffffc, 0x7, 0x5, [], 0x401}, {0xfffffffffffffffb, 0x6, 0x6, [], 0x101}, {0x7, 0x400000000000000, 0x63b, [], 0x9}, {0xffffffffffffffff, 0x4, 0x6, [], 0x9}]}}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000380)="81c7a3990f35da4c87360f06f0098b02000f01320f01f53e0f01d10f00d4660f32", 0x21}], 0x1, 0x20, &(0x7f0000000400)=[@cr4={0x1, 0x2644c9}, @cr0={0x0, 0x8}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) io_setup(0x9, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(r5, 0x8, 0x1, &(0x7f0000000180)=[{}], &(0x7f0000000200)={r6, r7+30000000}) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000080)={0x0, 0x9, {0x8, 0x7ff, 0x303f, 0x9, 0xb, 0x7, 0x0, 0x7}}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1f}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x9}, 0x8) 03:48:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x7, 0x4, 0xc1ea, 0x55, 0xfd}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(0x0, 0x0, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000042, 0x0) 03:48:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') 03:48:02 executing program 2: gettid() r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:02 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x0) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000085, 0x0) 03:48:02 executing program 3: r0 = add_key$keyring(&(0x7f00000017c0)='keyring\x00', &(0x7f0000001800)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x3, r0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) 03:48:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x400000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x35, 0xf, 0x0, "ec7d58d5e54efea4b756e8bbadb59360f74ad67ebc846448d39a6b4831ea1a36", 0x7f575f5b}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0xdc, [], 0xa, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/220}, &(0x7f00000003c0)=0x50) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0245628, &(0x7f00000000c0)={0x7f, 0x100, 0x1000, [], &(0x7f0000000040)=0x8}) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000400)={0x2000000000000000, 0x5000, 0x81, 0x8, 0x1c}) 03:48:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) fremovexattr(r0, &(0x7f0000000080)=@random={'system.', '\x00'}) 03:48:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) 03:48:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r2 = getegid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x4000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@euid_eq={'euid', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x97da}}]}}) fremovexattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="747201007465394a4884d256fac84140f1487a642e757365722e73797a00"]) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/95, 0x5f) fremovexattr(r0, &(0x7f00000005c0)=@known='user.syz\x00') ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)}) 03:48:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x50000, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) write$9p(r0, &(0x7f0000000800)="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", 0x600) fadvise64(r1, 0x0, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB]) 03:48:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$inet6(0xa, 0x100000000000, 0x802) 03:48:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000018, 0x0) 03:48:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') write$P9_RUNLINKAT(r0, &(0x7f0000000140)={0x342, 0x4d, 0x2}, 0xfffffffffffffdc9) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0xffffffffffffffe9, 0x80000000000000) fremovexattr(r0, &(0x7f0000000100)=@known='system.sockprotoname\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xf2, "00771269eb174706ceaee2888bf7cdb1d0ef4923f4a13dbdbbea9e0e2b8df1967adbdf3336a1adb6d6e33e3dad24e106b395c3c32a1acb0b2c133da2d309c927884bff2a09c07d0b5657869b3ea46560f88cd6d7b388ad1083da96f5d52367623b085edbe64699cf3b8b22bc37cfd8a534416bffaa120d091f93dcf4734b57df6074dd7cb61b0b6bc369c53c691f55e6d659d4e89bea46173a62d61218db937699bb6e020507af93d198ecd3ca67a8a9c08bc4337ddefe2cc07869be4bdfe56bc4f037f6e8bbe39eaa24207ea1f72ae690d34dc277f1dd3250b59357315f7ffea4bf563bb95b23539bd4dcbde63d5e22a415"}, &(0x7f0000000080)=0xfa) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r1, @in={{0x2, 0x4e21, @rand_addr=0xffffffff00000000}}, [0x7, 0x400, 0x17, 0x2, 0x1000, 0x9, 0x400, 0x6, 0xd89, 0x2, 0x499f, 0x8, 0x1ff, 0x2, 0x3ff]}, &(0x7f00000000c0)=0x100) 03:48:03 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:03 executing program 2: socket$inet(0x2, 0x0, 0x54) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0xfffffffffffffffc, 0x3) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:03 executing program 3: syz_execute_func(&(0x7f0000000080)="ba66440f50f564ff0941c335e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dcc4bd31919") clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) shutdown(r0, 0x0) 03:48:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000120, 0x0) 03:48:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x9, {0x6, 0x401, "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", 0x8e, 0xc8b, 0x8, 0x4, 0xfffffffffffffffc, 0x7fffffff, 0x4, 0x1}, r1}}, 0x128) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)=""/4096, 0x1000) 03:48:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffffda, 0x0, &(0x7f00000002c0), 0x388, 0x0, 0x0}) 03:48:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x1) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0xa000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000140)}, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0xffff, 0x20}, {0x30e, 0xfffffffffffffffc}, {0x3ff, 0x5}, {0x0, 0x1}, {0x2, 0x5}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl(r0, 0x1, &(0x7f0000000140)="5d41fc54aa025a2bad352cacf76d02c397cdac798866dd24f1ead9cd6774f1741f3ef029d5f0a9a05ac275f4237dab23f43981f50c9df816e80885a18c5e8c9b28332f5c6cedf905833d78d394d82cf4c77b2a7c0a07105b5a0543575ee329e29e518152c8a9c33e7562059f4b934380b5f91e2294f61306e1ce4b5ce9a9cb3a487daa7dc3cb69edcdd01ce1cf6a34fc9c08b31e4f14") [ 369.262890] binder: 18177:18178 ioctl c0306201 20000040 returned -14 03:48:03 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x400080) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10800008}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettfilter={0x4c, 0x2e, 0x0, 0x70bd29, 0x25dfdbfd, {0x0, r2, {0x0, 0x6}, {0xe}, {0xffe0}}, [{0x8, 0xb, 0x1f}, {0x8, 0xb, 0xfba5}, {0x8, 0xb, 0x993}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1c0000000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="50dd79157e0fdc60d799bec8512739c6", 0x10) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0100010000000000fffffffffeffffff040000000500000001000000000000000900000000000000d3720000000000007e0d000000000000000000000000000000000000000000000210000000000000000000"]) 03:48:03 executing program 3: socket$packet(0x11, 0x2000000002, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getegid() 03:48:04 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000d9, 0x0) 03:48:04 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0x800000000000000, 0x1000, 0x9, 0x0, 0xd}) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000180)=0x4010) r4 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xc1, 0x6, 0x7}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) 03:48:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, 0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00", 0x29e, 0x80000000000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000002d40)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$evdev(r0, &(0x7f0000002d80), 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@rand_addr, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000004c0)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000002d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000000500)={0x27c0, 0x12, 0x8, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x8}, [@typed={0x8, 0x6a, @uid=r1}, @generic, @nested={0x122c, 0x2d, [@generic="bb5a452d9cec7e6a89ed5f81f6f972cb63ab0fb4a3f3aadfda518336f186884d04fa19c0294c63c73bad969671b41a730b1ee1cb6575a7685971066e1288defc3d787f0d2dc5abafeacbec1fa29829a8ba89b2a04d", @typed={0x4, 0xf}, @typed={0x8, 0x1e, @uid=r2}, @generic="b98b5b3753f0e3bb6d1fb0e29ee595b1984f4b8e92c973cebe4ada03919602ab208a5287dc587ff648eda3c09b91c71d40397508ce22bc16df6106e4f8baacf9e11da88bc872c2fd668d3fefb46702973e4018ffa2cbc700e228fa2b2408e241afe908f28505b29c0917f85ffe70474d89ebec18b7b91afbca112275872315ca302a48d8cc3b60713f4b957c95fff2ee7f", @generic="956a53995a4e0e0f6da698ac167d8d0bee001f5fd7afcc8bfb05daa6eed0b01e42df09a5dde6c055d893d5a85c3f271246545fc3db533a88c68c0fd90952154194f7e6c2070275789efdfb77d49f1d63299f40419eec69f1e935e9905b5787366dc25b54f81405afe3a9aa10", @generic="fcf8a32088041281d8fb71e16479f87e85eb123fc0f11ea0cd6a15f312de60ab9c2ef80c193824d753b1d9155df9ffacb5a499cdde15c330937cd6d19e0b9aacc8120e515a81eb11f76cfdcfab44910ec71a8345c4e565078e6ff29fe55fec731601f0aea58c9daa53c758d974ebae7e520209d6c985507aa36d1798f3f3ad511263d69c23b8938ff39cddf18cdc7c6bd4d322fca12a126536bdc47bbe9530b98b2449af7d88b83abb7979aa92cab21c543d1f90e8b2dae698efaf25ae9e23366e4928290d158933e098", @generic="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"]}, @nested={0x2c8, 0x5d, [@typed={0x8, 0x7b, @u32=0xffff}, @generic="99eaec85091ec5acf276bbe7004586a423671a39f8fb46b10f793a00adef853d6eb88060cb2f1bb464a98608c37f2be58a766dbdf3b08b0435aa41f4cd349ee49690db8d07d2a0cb9b9a19c0d2a27155087de98a1c405dc3a00e6430dcdd017deeb1f04454f484f3fceeebe2", @generic="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", @typed={0xc, 0x79, @u64}, @generic="bd0fb8bde159d9ee55568c5b826c534681102e843f69cc9f6a599bc58b7240c645076bf4af34ac48c07014f44028a0bed8a4aec883a1104aaf19b720fb9a9edda9d0aeef3133dcb048028f398882727506f9285250f108", @generic="e82aa132aa780d35ebc33afdcd12188a48880acae4c2e22c270662d0401b96b15c281a2114ec12fa9913bf526bd9455ffbbca9d6e69ac141125a68304f24f15e231e7b8c3307535448fb7fb1ba029f26af59fb6c72e96ca3031b8b5eea1cce5f6b0ef0044d99e6d4321cf042bbcedb1f7a59e14c68cfbfdc02549f580afeb48f8c48ef8ef20af63a2f5f08987979452e78ff1f70c87fd34c64c2e3f810f2de983dc2229fde99ce84e31bb482887c8aa158", @typed={0x14, 0x1a, @ipv6=@dev={0xfe, 0x80, [], 0xe}}, @generic="7a20f5c5141bf6d4710b25365fa5321268b75c747198bfc9881d34b503a4587c", @typed={0x8, 0x70, @ipv4}]}, @nested={0x11dc, 0x3b, [@generic="3d692159928998fd51185275460bcdf98e0e1909cf7891389363de9cdc2f448adc3482afd313289b2842ad45fc37ab3647591e3aa624e929f17bbc3e57aaa77d14e42ce409568dcc3f281cec6f6f23866e58fe1ff90da77ee5ffb4588db1657e1e31a55ddebc0c3c200e7e6009569e5a1a3804b52e8663edbebcf7366bd093f6b65268d2d8804faf76", @typed={0x8, 0x84, @uid=r3}, @typed={0x8, 0x3b, @uid=r4}, @generic="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", @typed={0x8, 0x6e, @u32=0x1}, @generic="d59aed96f83d89bbbd0e120699ce1c1fbc41d73653eb31537c698d9ac101be7f17aa9628e8b3733c84bb5ba5bfb737f4f39a2918638a2c0a0da480a0eabd64733868eb6f6fd0b11a23e974a2e8264bf1bb26d5a37d11a54839cecc3c4d8bf0c6945687bb0f11bbd2f25ee724b3259d03ee47ba19188d2c6c492b3cbc11e1e53c5a78b2c67bcce01eb9f137208f456606126c3f8d3006679f5eaae649435ff7a8a5cb76a5b14a608ced0a2570f1a7b7e4ec33825deb73d8422942a50a992bd34ea84b181ea69e610e378457ffaa4ec96240e138010b7ed5a5c817baded586a710f487395c30063d4a07c79609c4454ae0b9123eca", @generic="41ee84152cacdb26a97666cec05f6261", @generic="cb92a1e5588eb2dfa60070ad90e53409f3358cfcb1d468c3ed4dada1bcec8cfd1a46a245c491c3", @typed={0xc, 0x6c, @u64=0x5}]}, @typed={0x8, 0x2e, @pid=r5}, @typed={0x4, 0xd}, @generic="aa4b8b926edebdd52a71ced317cb42c8f1c338a5f848d07519e1993bec5279a53b78eb4bdb7cca3d64b49f4d6a4192c6b687e5c6766c01e57beb783879090a2c61c2c2ab10408f3e0123fd712ea9add8649bda7ab0cf6d4cd3a7c09d5fc3dfd02fc26b6a900faf3007990cf563ab22cd4c8e", @generic="83a5d3fe59f32fa3df1552c8f1632cdda00ff1673aace66a70b4068aa12a7e7b97a964fbb40416fc5556b7d2a19ae7389ad63b850ac4ceacda65dffdab3c2648c35f33a7975c52aeee5cb84dadba", @typed={0x8, 0x4e, @str='\x00'}]}, 0x27c0}}, 0x4000080) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:04 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x80) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000002c0)=""/4096) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x200000, 0x0) eventfd2(0x8, 0x80001) fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)=""/132, &(0x7f0000000080)=0x84) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1b, 0x1, 0x5, "896d98d5a104ae65a8d54b09343f3828", "fe1e73553546"}, 0x1b, 0x3) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:04 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000e9, 0x0) 03:48:04 executing program 3: 03:48:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x400, 0x10000) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:04 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x39, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00", 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) dup3(r1, r1, 0x80000) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) 03:48:04 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0x4, 0x5, 0x2, 0x0, 0xffffffff7fffffff, 0x5010, 0x2, 0x200, 0x10001, 0x6, 0x8, 0xffffffff, 0x8, 0x100, 0x101, 0x7ff, 0x1, 0x6, 0x3f, 0x80000001, 0x6, 0xffffffffffffff81, 0x2, 0x1, 0x7e4, 0x2, 0x80000000, 0x1, 0x3, 0x9, 0x2, 0x1000, 0x7, 0x8001, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x40, 0x164, 0x7, 0xb, 0x7, 0x1, 0x3}, r2, 0x10, r1, 0x2) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4138ae84, &(0x7f0000000000)) 03:48:04 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000045, 0x0) 03:48:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000008, 0x0) 03:48:04 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, 0x0, &(0x7f0000000280)='posix_acl_access:[\x00', 0xffffff76, 0x1) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) fremovexattr(r1, &(0x7f0000000140)=@known='user.syz\x00') 03:48:05 executing program 3: 03:48:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={r1, 0x22}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x1a) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000103, 0x0) 03:48:05 executing program 3: 03:48:05 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x7, 0x0, "56c598c8aacc7be4deeed28d30379d52b6788bea63a9f16d40e5bf3f86e3a143"}) 03:48:05 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/rt6_stats\x00') fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2000000000015, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r1, 0x0, 0x0) 03:48:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) 03:48:05 executing program 4: r0 = socket(0x10, 0x2020000000802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f00018000480ed0500800000e0d45cffffffffff0008000f0008000000", 0x24) 03:48:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000000c, 0x0) 03:48:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) fsetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0xe59, 0x7, "46903a9bd32d2f6c370558123ca869dabac14a5008fe485c9aa3a31b0058c7f2", 0x1ac, 0x9, 0x9, 0xc0df, 0x60}) 03:48:05 executing program 4: 03:48:05 executing program 3: 03:48:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(anubis-generic)\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="99b642fda1e8cb45f10951ffdcce9da5678fd6ed3787b7e47dfe1feeee52337f7b3cbb5a5cf422479a0037c52ecceca776d831f759574d394b1542301cd9e741a3a6e724c91ae45a98da30b50cacbc884d98f34e38649005e6349dba57c16611551c"], 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000300)='&') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x460}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x49f, 0x100000000}, &(0x7f0000000180)=0xc) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)=""/233) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:48:05 executing program 3: 03:48:05 executing program 4: 03:48:05 executing program 3: 03:48:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000f0, 0x0) 03:48:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x61, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0xa8010, r0, 0x0) fsetxattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="38e1fc76"], 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x5, @loopback, 0x4}, @in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e21, @rand_addr=0x1000}, @in6={0xa, 0x4e22, 0xff, @remote, 0x4}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x11}, 0xcfd4}, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0xfffffffffffffffd}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0xfff, @mcast2, 0x7}], 0x2de) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) 03:48:05 executing program 4: 03:48:06 executing program 4: [ 371.628443] IPVS: ftp: loaded support on port[0] = 21 [ 371.796761] device bridge_slave_1 left promiscuous mode [ 371.802273] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.878919] device bridge_slave_0 left promiscuous mode [ 371.884435] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.991377] team0 (unregistering): Port device team_slave_1 removed [ 372.009706] team0 (unregistering): Port device team_slave_0 removed [ 372.025875] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 372.078578] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 372.154989] bond0 (unregistering): Released all slaves [ 372.637875] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.644347] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.651948] device bridge_slave_0 entered promiscuous mode [ 372.695318] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.701738] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.709451] device bridge_slave_1 entered promiscuous mode [ 372.751304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 372.794230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 372.923028] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 372.969406] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 373.175645] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 373.183143] team0: Port device team_slave_0 added [ 373.238546] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 373.245958] team0: Port device team_slave_1 added [ 373.286878] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 373.293755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.309402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.343657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 373.350569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.367164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.398235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 373.405319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.413160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.442908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 373.450235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.458250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.785870] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.792254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.798989] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.805358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.812395] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 374.235293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.705556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.792111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 374.877504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 374.883610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.893069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.973052] 8021q: adding VLAN 0 to HW filter on device team0 03:48:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000a80)) 03:48:10 executing program 3: 03:48:10 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @remote, [], {@generic={0x88f5}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() r10 = geteuid() ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0245629, &(0x7f00000007c0)={0x3, 0x5, 0x81, [], &(0x7f0000000780)=0xb2}) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000bc0)=0x7fffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) r14 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000880)={0x290, r14, 0x401, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r12}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9e00}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r12}, {0xb4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x2, 0x6, 0x7, 0xc4}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}}]}}, {{0x8, 0x1, r12}, {0x13c, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x566deb00}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x6}, [{0x2, 0x1, r4}, {0x2, 0x4, r5}, {0x2, 0x6, r6}, {0x2, 0x4, r7}, {0x2, 0x5, r8}, {0x2, 0x1, r9}, {0x2, 0x4, r10}, {0x2, 0x2, r11}, {0x2, 0x4, r13}], {0x4, 0x1}, [{0x8, 0x2, r15}], {0x10, 0x1}, {0x20, 0x2}}, 0x74, 0x1) r16 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r16, 0xc0a45352, &(0x7f0000000000)={0x80, 0x0, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0", 0x4}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:10 executing program 4: 03:48:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000d5, 0x0) 03:48:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2000000000000) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)) 03:48:10 executing program 4: 03:48:10 executing program 3: 03:48:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000100)=@known='user.syz\x00', 0x0, 0xfffffffffffffef5, 0x3) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:10 executing program 3: 03:48:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r4 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000000c0)={@loopback, r5}, 0x14) 03:48:10 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x40, 0x101400) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='user.syz\x00') 03:48:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, 0x0) 03:48:10 executing program 4: 03:48:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000038, 0x0) 03:48:10 executing program 4: 03:48:10 executing program 3: 03:48:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:10 executing program 4: 03:48:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:10 executing program 5: 03:48:10 executing program 3: 03:48:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000007d, 0x0) 03:48:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') 03:48:10 executing program 4: 03:48:10 executing program 5: 03:48:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x6e) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000100)=""/179) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:10 executing program 3: 03:48:10 executing program 4: 03:48:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r5, &(0x7f0000005fc0), 0x80000000000006a, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000000)) 03:48:10 executing program 5: 03:48:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101040, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) 03:48:10 executing program 3: 03:48:11 executing program 4: 03:48:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000008c, 0x0) 03:48:11 executing program 5: 03:48:11 executing program 4: 03:48:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:11 executing program 3: 03:48:11 executing program 5: 03:48:11 executing program 3: 03:48:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) write$P9_RWRITE(r3, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x36a}, 0xb) r4 = syz_open_dev$media(0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000080)=0x6c6, &(0x7f00000000c0)=0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) r5 = getpid() fcntl$setown(r4, 0x8, r5) 03:48:11 executing program 4: 03:48:11 executing program 3: 03:48:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:11 executing program 5: 03:48:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000013e, 0x0) 03:48:11 executing program 5: 03:48:11 executing program 3: 03:48:11 executing program 4: 03:48:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x10000, 0x101000) 03:48:11 executing program 3: 03:48:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r4}}, 0xc) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xe3, 0x101100) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) restart_syscall() ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:11 executing program 5: 03:48:11 executing program 4: 03:48:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) fsetxattr(r0, &(0x7f0000000100)=@random={'user.', 'keyring\x00'}, 0x0, 0xfffffffffffffff2, 0x3) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000a5, 0x0) 03:48:11 executing program 3: 03:48:11 executing program 4: 03:48:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="706572736f6e616c69747900098f743c602e511c247dc9640462586d54e97068f03897c04f5ad26e3e616d9fe5739a4644b83d0b60ffd95fc7b3b0fddf335577076f015d2321750f1524c62604d2a98e9dd0a2594ff5c97ecb78bed9e60e08eb7de43453ada6e3bc55088eb303636c73959b008172e52f73409eb4e311d47dd9bdebdbdcf751c5a25a0b47199044bbf3210de7c7ba6e673f1f4a83e56261f7d3fd9621de86380905c62c0b54fd2a81fca88014c6d8beba2b8b9933d9604f3abe0c58484143b5be884cafc1d6354c26025934170bbbba6a63bb963aff42bbaa793ad07a20a774cdf3fae539662192a40045f6bdc73fe0903214a3847513813724f5b3fcf6baabf97b7e42e31dbd9aec574f235743") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:11 executing program 5: 03:48:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8, 0x40000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0x3cad, 0xc, [0x80000000, 0x80000001, 0x7c07]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x1) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000080)) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:12 executing program 3: 03:48:12 executing program 4: 03:48:12 executing program 5: 03:48:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0xfffffffffffffff5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:12 executing program 3: 03:48:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000031, 0x0) 03:48:12 executing program 4: 03:48:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x280000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="0489af41933f70c100d562dda7008000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x3, 0x5, 0x80}, &(0x7f00000001c0)=0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r5 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$void(r5, 0x5451) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:48:12 executing program 5: 03:48:12 executing program 4: clone(0x2002001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2007ff) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000001c0)) 03:48:12 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000240)) 03:48:12 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r0 = getpgrp(0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2800) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000140)={0xe, 0x4, {0x53, 0x40, 0x7, {0x2, 0xffff}, {0x6, 0x8001}, @ramp={0xff, 0x20, {0x4, 0x6, 0xcb36, 0x101}}}, {0x51, 0x8000, 0x8, {0x48a912f4, 0x6}, {0x7, 0x9}, @rumble={0x5}}}) r2 = syz_open_procfs(r0, &(0x7f0000000100)='net/icmp6\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) fsetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000240)) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000040)=""/33) 03:48:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000066, 0x0) 03:48:12 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x1f, @mcast2, 0x20000000000004}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:48:12 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) 03:48:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000a7, 0x0) 03:48:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xffffffffbfffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) [ 377.937770] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 03:48:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) [ 377.982201] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 03:48:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r5, &(0x7f0000005fc0), 0x80000000000006a, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000000)) 03:48:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x4, 0x4}) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000040)={0x51, 0x2, 0x6, {0x401}, {0x80, 0x13e20811}, @const={0xffff, {0x8, 0xfbb, 0xea, 0x2}}}) 03:48:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r5, &(0x7f0000005fc0), 0x80000000000006a, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000000)) 03:48:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000001b, 0x0) 03:48:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='user.syz\x00') getpid() fsetxattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000100)='posix_acl_accessbdev]\x00', 0x16, 0x1) 03:48:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r4 = syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x1000, {{0xa, 0x4e24, 0x0, @ipv4, 0x7ff}}}, 0x84) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000080)={0x7, 0x3, 0x4, @remote, 'veth0\x00'}) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000140)={0x7fff, 0x10001}) prctl$PR_SET_PDEATHSIG(0x1, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0), 0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) 03:48:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000c5, 0x0) 03:48:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') r1 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00", 0xfffffffffffffffb) r2 = add_key(&(0x7f0000001380)='id_resolver\x00', &(0x7f00000013c0)={'syz', 0x0}, &(0x7f0000001400)="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", 0x1000, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001340)=[{&(0x7f0000000140)="1ef773f8575d97470b296b166a1fbf7fd242a82b2d4f6d291bb4a67953a28c41e052de", 0x23}, {&(0x7f0000000180)="a57e04207dadcc8239e7383f1e70b56e75acf98bbac0f67c5bc45ae20fe159a02790f8959dd5a9bf916edbc9fa3ab876c06161812354263b383844d05b52e5a54c46ec0e3818721d470372e84d87b806fb054f76af53e4d2b54e20e9711bead84e8121368c4ca7f7afa9534d5375c3c79d6be380e817ee28585249184a5dcc17977632f099f66264ab38b4c27a5f1259d6db25d1ce332de59687cc38d751", 0x9e}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000240)="89a16dbfc7eb83d15114676596aa72d5f281b7d1775c3764399a628f9cb5aac259f78b4f7069117b2fce55824219091a933cd7c122fb22e0d87d4e", 0x3b}, {&(0x7f00000012c0)="15fa64f83eeee89faba9a67c680508bd917809c254c74cd2f239477c2fdb1973fc5506e22b1471011573ffc17536bd5f3594517a43e5700246daaa2ec802e5ccebf6e7c951e54f253f63e150256fc073ff5dffab44e758e355d3", 0x5a}], 0x5, r2) 03:48:13 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000a80)) 03:48:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000) accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '-'}], 0xa, "f0d40f6c88859d3d5301b52056d7f70364180e128376822c72c165e9f466be5207f25c842cc1a6285e3629822da867f2c2"}, 0x3e) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(anubis-generic)\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="99b642fda1e8cb45f10951ffdcce9da5678fd6ed3787b7e47dfe1feeee52337f7b3cbb5a5cf422479a0037c52ecceca776d831f759574d394b1542301cd9e741a3a6e724c91ae45a98da30b50cacbc884d98f34e38649005e6349dba57c16611551c"], 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000300)='&') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x460}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x49f, 0x100000000}, &(0x7f0000000180)=0xc) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)=""/233) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:48:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, [0x0, 0x6, 0x7, 0x10000]}) fsetxattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00', 0x0, 0xfffffffffffffda0, 0x2) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:13 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000a80)) 03:48:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000140)) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x4) 03:48:13 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000100)) r2 = syz_open_procfs(r0, &(0x7f0000000140)='setgroups\x00') fsetxattr(r2, &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x3) fremovexattr(r2, &(0x7f00000001c0)=@known='user.syz\x00') 03:48:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000e5, 0x0) 03:48:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x0, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:14 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ifb0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x3a, 0x5, [{0x1, 0xbb41, 0x2, 0x1}, {0x6, 0x3, 0x6, 0x91b4}, {0x6, 0x81, 0xfff, 0xa9}, {0xffffffff9a1f5722, 0x73ab, 0x6, 0x1}, {0x60d, 0x0, 0x7, 0x3}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "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", 0x21, 0x9, 0x3, 0x7, 0x5, 0x0, 0x1}}}, 0x120) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0e05403, &(0x7f0000000740)={{0x3, 0x3, 0x81, 0x0, 0x1}, 0xfff, 0x74, 'id0\x00', 'timer0\x00', 0x0, 0x3ff, 0x8, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, &(0x7f00000006c0)={0x0, 0x8, 0x0, 0xda, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f00000000c0)='/dev/media#\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) connect$netlink(r3, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x20110000}, 0xc) r4 = syz_open_dev$media(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000001c0)='}{system{nodeveth1procuserem1)*lo\x00') prctl$PR_SET_PDEATHSIG(0x1, 0x40) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 03:48:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x7a00, 0x10a000d04) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000540)={{0xa, 0x5, 0x5, 0x5, 'syz1\x00'}, 0x0, [0xffffffffffffffe0, 0x6, 0xffffffff, 0x4, 0xe9e6, 0x2, 0x2, 0x3, 0xffffffff, 0x3, 0x7, 0x7, 0xa05, 0xff, 0x8000, 0x3aec, 0x3f, 0x800000, 0x81, 0x9, 0x6e, 0x30, 0x0, 0x9, 0x1ff, 0x6, 0x9, 0x8, 0x8000, 0x3, 0x9, 0x4, 0x3, 0x5, 0x0, 0x3, 0x6c9, 0xff, 0x2, 0x8000, 0x81, 0x0, 0x1000, 0x8, 0x7, 0x10000, 0x8, 0x8, 0x6, 0x9, 0x6, 0x1f, 0xfffffffffffff800, 0x2, 0x101, 0x1, 0xffffffffffff0001, 0x9, 0x7, 0x800, 0x3fe, 0x3, 0x6842, 0x6, 0x200, 0x8, 0x800, 0x2000, 0x5, 0x100, 0x0, 0xffff, 0x3, 0x6, 0x3, 0x0, 0x305d, 0x20, 0x81, 0xae1c, 0x76, 0x1, 0x4, 0x9, 0xec, 0xdb86, 0xfffffffffffffffc, 0x3, 0x1, 0x400, 0xfffffffffffffeff, 0x1aa8, 0x2, 0xffff, 0x7a, 0x6, 0x80000000, 0x100000001, 0x3, 0x2, 0x7fff, 0xfffffffffffffffe, 0x4, 0x1, 0x7, 0x5, 0x80000001, 0x3, 0x40, 0x7fffffff, 0x9, 0x401, 0x4, 0x0, 0x7, 0x9, 0x0, 0x40, 0x86, 0x663, 0x1ff, 0x9, 0x1000, 0x3, 0x4, 0x100000000, 0x400, 0x7f], {r3, r4+30000000}}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa28300", 0x10}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000135, 0x0) 03:48:14 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x3, 0xfffffffffffffffe, 0xffffffffffffffd2}) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:14 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x9, 0x2) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r2 = dup2(r0, r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40046602, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r6 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000000)) getsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 03:48:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x7a00, 0x10a000d04) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000540)={{0xa, 0x5, 0x5, 0x5, 'syz1\x00'}, 0x0, [0xffffffffffffffe0, 0x6, 0xffffffff, 0x4, 0xe9e6, 0x2, 0x2, 0x3, 0xffffffff, 0x3, 0x7, 0x7, 0xa05, 0xff, 0x8000, 0x3aec, 0x3f, 0x800000, 0x81, 0x9, 0x6e, 0x30, 0x0, 0x9, 0x1ff, 0x6, 0x9, 0x8, 0x8000, 0x3, 0x9, 0x4, 0x3, 0x5, 0x0, 0x3, 0x6c9, 0xff, 0x2, 0x8000, 0x81, 0x0, 0x1000, 0x8, 0x7, 0x10000, 0x8, 0x8, 0x6, 0x9, 0x6, 0x1f, 0xfffffffffffff800, 0x2, 0x101, 0x1, 0xffffffffffff0001, 0x9, 0x7, 0x800, 0x3fe, 0x3, 0x6842, 0x6, 0x200, 0x8, 0x800, 0x2000, 0x5, 0x100, 0x0, 0xffff, 0x3, 0x6, 0x3, 0x0, 0x305d, 0x20, 0x81, 0xae1c, 0x76, 0x1, 0x4, 0x9, 0xec, 0xdb86, 0xfffffffffffffffc, 0x3, 0x1, 0x400, 0xfffffffffffffeff, 0x1aa8, 0x2, 0xffff, 0x7a, 0x6, 0x80000000, 0x100000001, 0x3, 0x2, 0x7fff, 0xfffffffffffffffe, 0x4, 0x1, 0x7, 0x5, 0x80000001, 0x3, 0x40, 0x7fffffff, 0x9, 0x401, 0x4, 0x0, 0x7, 0x9, 0x0, 0x40, 0x86, 0x663, 0x1ff, 0x9, 0x1000, 0x3, 0x4, 0x100000000, 0x400, 0x7f], {r3, r4+30000000}}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000077, 0x0) 03:48:16 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000002c0)) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:16 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed5540000424ada75af1f02ac06edbcd7a071fb35331ce39c5a000000008f2facf3d5aa78bfee9b9798f38b14cc5ed59da40c15ec118287ec9001573382eb81f457ae743df1aaf21b3e77f02b257680b6fec372a7a3e25e") write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000180)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100), 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000300)={0x1, 0x40, {0x0, 0x1, 0x6, 0x2}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) fsync(r6) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000002c0)) ioctl$FS_IOC_SETVERSION(r3, 0x40047602, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={'bridge_slave_0\x00', {0x2, 0x0, @broadcast}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000380)) dup2(r6, r5) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r2, 0x10, 0x0, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @multicast2}, 0xc3}}}, 0xa0) ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000380)={0x7, 0x1ff, 0xfff, [], &(0x7f0000000240)}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x6, @remote}, 0x2, {0x2, 0x4e20, @broadcast}, 'ip6_vti0\x00'}) fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 03:48:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/media#\x00', 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f00000000c0)=0x101, 0x4) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x8000032) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000f6, 0x0) 03:48:16 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000002c0)) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x3, 0x800000000000006) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a22744acf9bd1aa35bb6818"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc4, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0xbeb}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x3f78, @dev={0xfe, 0x80, [], 0x15}, 0x1f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r4}, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x1f, 0x500, 0x0, 0x1c0270, r2}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) r6 = fcntl$getown(r3, 0x9) write$cgroup_pid(r5, &(0x7f0000000340)=r6, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000300)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x20000000000, 0x7, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x5, 0x7, 0xf054}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1}, &(0x7f00000001c0)=0x8) 03:48:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x3, 0x800000000000006) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a22744acf9bd1aa35bb6818"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc4, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0xbeb}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x3f78, @dev={0xfe, 0x80, [], 0x15}, 0x1f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r4}, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x1f, 0x500, 0x0, 0x1c0270, r2}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) r6 = fcntl$getown(r3, 0x9) write$cgroup_pid(r5, &(0x7f0000000340)=r6, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000300)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x20000000000, 0x7, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x5, 0x7, 0xf054}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1}, &(0x7f00000001c0)=0x8) 03:48:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x3, 0x800000000000006) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a22744acf9bd1aa35bb6818"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc4, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0xbeb}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x3f78, @dev={0xfe, 0x80, [], 0x15}, 0x1f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r4}, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x1f, 0x500, 0x0, 0x1c0270, r2}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) r6 = fcntl$getown(r3, 0x9) write$cgroup_pid(r5, &(0x7f0000000340)=r6, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000300)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x20000000000, 0x7, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x5, 0x7, 0xf054}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1}, &(0x7f00000001c0)=0x8) 03:48:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000ac, 0x0) 03:48:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x6, 0x6, 0x7fffffff, 0x2, 0x800, 0x1000, 0x6, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x400, 0x3, 0x5, 0x2, 0x1}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x3, 0x8001, 0xfffffffffffffffd, 0x51, 0x401}, 0x14) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) 03:48:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', 'vboxnet0\x00'}, 0x0, 0xfffffffffffffefe, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {r1, r2/1000+10000}}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') fcntl$setflags(r0, 0x2, 0x1) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="cc0001000000007b0000000700000000000000000000008f45c78787ce5f03de9115622c74819e240e6d4f8c8d97d3902427a8b03587e6d403dcc5d173962381f2c4add62924a35248226a6225a60c1c7fc474e200b4e454c43a5f98822c375024068caca487f92442f6e3da61c229902ff85ac9bc0c7b55512b6a634e853a8057e10eed46e79045698f7dfc002c54000000000000000000000000000000ad2c7ee9ee308b40f6b1705fb6b1df5667c649c662076de10300000000000000d948171746e7de245de0d0d8705b64ec39b3"], 0xb0) 03:48:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x0, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000114, 0x0) 03:48:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x3, 0x800000000000006) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a22744acf9bd1aa35bb6818"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc4, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0xbeb}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x3f78, @dev={0xfe, 0x80, [], 0x15}, 0x1f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r4}, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x1f, 0x500, 0x0, 0x1c0270, r2}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) r6 = fcntl$getown(r3, 0x9) write$cgroup_pid(r5, &(0x7f0000000340)=r6, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000300)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x20000000000, 0x7, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x5, 0x7, 0xf054}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1}, &(0x7f00000001c0)=0x8) 03:48:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r4, 0x2}}, 0x18) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x2000000000000, 0x505c00) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000000)) 03:48:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r1 = socket$inet6(0xa, 0x3, 0x800000000000006) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a22744acf9bd1aa35bb6818"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc4, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0xbeb}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x3f78, @dev={0xfe, 0x80, [], 0x15}, 0x1f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r4}, 0x8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x1f, 0x500, 0x0, 0x1c0270, r2}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) r6 = fcntl$getown(r3, 0x9) write$cgroup_pid(r5, &(0x7f0000000340)=r6, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000300)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)='\x00', 0x1, 0x80000000000000) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x20000000000, 0x7, 0x4, 0x7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x5, 0x7, 0xf054}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1}, &(0x7f00000001c0)=0x8) 03:48:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000080)="2f64a9840000000000002300", 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(0x0, 0x0, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000c3, 0x0) 03:48:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000002c0)=0x3) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000240)=""/50, 0x32}], 0x3) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000001e, 0x0) 03:48:18 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000005e, 0x0) 03:48:18 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{0x0}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair(0x0, 0x7fffe, 0xfffffffffffffff7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @local}}, 0x200, 0xf7c2}, &(0x7f00000000c0)=0x88) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000200)={r4, 0x40}, &(0x7f0000000240)=0x8) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:18 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00'}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e05411, &(0x7f00000000c0)=""/20) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000026, 0x0) 03:48:18 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280), 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280), 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x0, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000013b, 0x0) 03:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r3 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0xc) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known="757365722e73797ae4") 03:48:18 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 3 (fault-call:12 fault-nth:0): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known="757365722e73797ae4") 03:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x0, 0x7fff}) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:18 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000e4, 0x0) 03:48:18 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 384.357682] FAULT_INJECTION: forcing a failure. [ 384.357682] name failslab, interval 1, probability 0, space 0, times 0 03:48:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known="757365722e73797ae4") [ 384.458412] CPU: 0 PID: 19206 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #249 [ 384.465786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.465807] Call Trace: [ 384.465850] dump_stack+0x244/0x39d [ 384.465873] ? dump_stack_print_info.cold.1+0x20/0x20 [ 384.465905] should_fail.cold.4+0xa/0x17 [ 384.465927] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 384.465959] ? mark_held_locks+0x130/0x130 [ 384.500108] ? __lock_acquire+0x62f/0x4c20 [ 384.504368] ? find_held_lock+0x36/0x1c0 [ 384.504404] ? perf_trace_sched_process_exec+0x860/0x860 [ 384.504418] ? __lock_acquire+0x62f/0x4c20 [ 384.504433] ? __lock_acquire+0x62f/0x4c20 [ 384.504452] __should_failslab+0x124/0x180 [ 384.526646] should_failslab+0x9/0x14 [ 384.530472] kmem_cache_alloc_node_trace+0x270/0x740 [ 384.535615] ? mark_held_locks+0x130/0x130 [ 384.539872] ? mark_held_locks+0x130/0x130 [ 384.544135] __kmalloc_node+0x3c/0x70 [ 384.547952] kvmalloc_node+0x65/0xf0 [ 384.551678] video_usercopy+0x35c/0x1760 [ 384.555746] ? v4l_s_fmt+0x990/0x990 [ 384.559471] ? v4l_enumstd+0x70/0x70 [ 384.563196] ? zap_class+0x640/0x640 [ 384.566978] ? zap_class+0x640/0x640 [ 384.570703] ? zap_class+0x640/0x640 [ 384.574471] ? find_held_lock+0x36/0x1c0 [ 384.578570] ? __might_fault+0x12b/0x1e0 [ 384.582670] ? lock_downgrade+0x900/0x900 [ 384.586837] ? lock_release+0xa00/0xa00 [ 384.590823] ? perf_trace_sched_process_exec+0x860/0x860 [ 384.596329] ? video_usercopy+0x1760/0x1760 [ 384.600691] video_ioctl2+0x2c/0x33 [ 384.604334] v4l2_ioctl+0x154/0x1b0 [ 384.607989] ? video_devdata+0xa0/0xa0 [ 384.611912] v4l2_compat_ioctl32+0x3e5/0x5cf0 [ 384.616422] ? fget_raw+0x20/0x20 [ 384.619901] ? put_v4l2_buffer32+0xf40/0xf40 [ 384.624326] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 384.629875] ? fput+0x130/0x1a0 [ 384.633171] ? do_fast_syscall_32+0x150/0xfb2 [ 384.637678] ? do_fast_syscall_32+0x150/0xfb2 [ 384.642199] ? put_v4l2_buffer32+0xf40/0xf40 [ 384.646638] __ia32_compat_sys_ioctl+0x20e/0x630 [ 384.651417] do_fast_syscall_32+0x34d/0xfb2 [ 384.655760] ? do_int80_syscall_32+0x890/0x890 [ 384.660357] ? entry_SYSENTER_compat+0x68/0x7f [ 384.664954] ? trace_hardirqs_off_caller+0xbb/0x310 [ 384.669984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.674835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.674855] ? trace_hardirqs_on_caller+0x310/0x310 [ 384.674873] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 384.674891] ? prepare_exit_to_usermode+0x291/0x3b0 [ 384.674912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.689771] entry_SYSENTER_compat+0x70/0x7f [ 384.704035] RIP: 0023:0xf7fcfa29 03:48:19 executing program 4 (fault-call:12 fault-nth:0): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000e7, 0x0) [ 384.707420] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 384.726326] RSP: 002b:00000000f5fcb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 384.726342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05604 [ 384.726352] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.726361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 03:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r3 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0xf, 0x198) [ 384.726370] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 384.726380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:48:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000010c0)={0x1c, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x0, 0x3}, @acquire, @exit_looper], 0x1000, 0x0, &(0x7f00000000c0)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000002000)}) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x53, r0, 0x31) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001100)={0x0}) getrandom(&(0x7f0000001440)=""/4096, 0x1000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000011c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000001200)={0x0}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002440)='/dev/rtc0\x00', 0x400600, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000002480)={0x30, 0x5, 0x0, {0x0, 0x3, 0x8000, 0x2}}, 0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x8c, 0x0, &(0x7f0000001300)=[@increfs_done={0x40106308, r2, 0x3}, @free_buffer={0x40086303, r3}, @enter_looper, @increfs_done={0x40106308, r4, 0x2}, @register_looper, @register_looper, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001240)=[@ptr={0x70742a85, 0x1, &(0x7f0000001180), 0x1, 0x4, 0x2d}, @flat={0x776a2a85, 0x1, r5, 0x4}, @flat={0x776a2a85, 0xb, r6, 0x8}], &(0x7f00000012c0)=[0x48, 0x20, 0x18]}}, @register_looper], 0xd, 0x0, &(0x7f00000013c0)="41118630a9a599adc64dcf3b82"}) openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/vsock\x00', 0x200, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 03:48:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:19 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000048, 0x0) 03:48:19 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:19 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r1, r1) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 385.206974] binder: 19252:19253 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:48:19 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x40045612, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000b6, 0x0) [ 385.251284] binder: 19252:19253 Acquire 1 refcount change on invalid ref 0 ret -22 [ 385.306824] binder: 19252:19262 IncRefs 0 refcount change on invalid ref 0 ret -22 03:48:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) 03:48:20 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0245629, &(0x7f0000000300)={0x8, @pix_mp}) [ 385.449609] binder: 19252:19253 BC_INCREFS_DONE u0000000020ffc000 no match [ 385.546906] binder: 19252:19253 BC_FREE_BUFFER u0000000000000000 no match [ 385.553960] binder: 19252:19253 BC_INCREFS_DONE u0000000000000000 node 10 cookie mismatch 0000000000000002 != 0000000000000000 [ 385.565750] binder: 19252:19253 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 385.574022] binder: 19252:19253 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:48:20 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000340)) getrandom(&(0x7f0000000840)=""/153, 0x99, 0x4000000003) [ 385.592516] binder: 19252:19253 got transaction to invalid handle [ 385.614669] binder: 19252:19253 transaction failed 29201/-22, size 88-24 line 2834 [ 385.664777] binder: BINDER_SET_CONTEXT_MGR already set [ 385.684883] binder: 19252:19261 ioctl 40046207 0 returned -16 [ 385.769168] binder: 19252:19253 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 385.815318] binder: 19252:19253 BC_INCREFS_DONE u0000000020ffc000 no match [ 385.822568] binder: 19252:19253 BC_FREE_BUFFER u0000000000000000 no match [ 385.831984] binder: 19252:19253 BC_INCREFS_DONE u0000000000000000 no match [ 385.839472] binder: 19252:19253 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 385.852508] binder: 19252:19253 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:48:20 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r1, r1) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:20 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x80045626, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='vmnet1\x00', 0xfffffffffffffffe) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000008e, 0x0) 03:48:20 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f0000000340)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000680)=[{&(0x7f0000000480)=""/60}, {&(0x7f0000000780)=""/227}, {&(0x7f0000001b00)=""/4096}], 0xc437adb) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100000000, {0x77359400}, {0x0, 0x0, 0x0, 0x80, 0x0, 0x0, "010000e9"}, 0x3, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002102, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:20 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000002c0)=0xc) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 385.862316] binder: 19252:19253 got transaction to invalid handle [ 385.875684] binder: 19252:19253 transaction failed 29201/-22, size 88-24 line 2834 [ 385.882519] binder: undelivered TRANSACTION_ERROR: 29201 [ 385.900649] binder: undelivered TRANSACTION_ERROR: 29201 03:48:20 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x5450, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffd) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r3 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000140)=""/244, &(0x7f0000000080)=0xf4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:20 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5640, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:20 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0185649, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000143, 0x0) 03:48:21 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc100565c, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r1, r1) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80, 0x38) getdents64(r1, &(0x7f0000000140)=""/247, 0xf7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) fadvise64(r4, 0x0, 0x40, 0x3) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000c6, 0x0) 03:48:21 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x1ffc, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)=0x0) r8 = perf_event_open(&(0x7f0000000780)={0x5, 0x70, 0xd6, 0x5, 0x8, 0x6a, 0x0, 0x100000001, 0x1110, 0x6, 0x1, 0x0, 0x3, 0x8, 0x5, 0x0, 0x400, 0x9, 0x9, 0x5, 0x8, 0x5, 0x1b, 0xfffffffffffffffd, 0x9, 0x101, 0x8391, 0x9, 0x9, 0x4, 0x20, 0x2f, 0x3, 0x195, 0x9, 0xfffffffffffff30d, 0x8, 0x3ff, 0x0, 0x9, 0x4, @perf_config_ext={0x4, 0xc5}, 0x800, 0x6, 0x2, 0x5, 0x9, 0x5, 0x4}, r7, 0x5, r4, 0xa) readv(r8, &(0x7f0000000600), 0x0) r9 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r9, 0x0, 0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r10, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x3, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:21 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x4004560e, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:22 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x205, &(0x7f0000009ff0), 0x0, 0x0, 0x0, 0x6}, 0xfffffffffffffffc) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000de, 0x0) 03:48:22 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc050561a, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r4 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r5, 0x8, "378ffa", "b3947791bcc6615ac588f7f65c439a9690d7da8141cd356c81d21a8d23afa18a6504c9c0ff5690fbe0dc9499074e1e98c2d4fa0737a285968495c8506be2e472822589d08b90aab4b44d734d0d0522177a63b9fee72a2b07e7457d98f1162bb2c25b10623f50adbbd7b17adc1b943496515a90e8859560c61339cace88823636d14ee5256f778c7a7df535ea4d7bf5066f41939a7da28e858acdfed9d2a7d6e75fa8b1a130f20ff2d3555ae71018b561b18a5b32f33c9f273f42c3caa86d108f722f9ff2d847f7989c0d3144b77729f644428f6e97cba3b0566000354bbf9d2ec6f8b6af7d2653749f409c40bab3d4994953817761926655f2cb76d07bd64ac6"}}, 0x110) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r1, r1) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:22 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000002c0)=0xffffffffffffffd6) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:22 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x4030560b, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80400, 0x0) write$UHID_INPUT2(r3, &(0x7f00000000c0)={0xc, 0xf2, "1ebad9fd0595fc98710f951608cc2a98bd1f253b065acb615e7c3cc9582f56fe9c988ccddeb116d1a54b737df77668e92aab8b55b9d5690bc2e98a2694a29491032cde696fbcd9ff08528dfc1101cf9dc9486a3a31c13c6a6079d9e67b71428ea1c9d47c04e3f93137446607602570df194f4c690a288b0f47aa6594d9f52bd263c16052ce46391144600beb7a790f5e61a08e45ae594c99de02b94bcb9ad77527ce179765e5c7296475cdfe5fed50483f7b2588bacae5eff0cd75caff50eb9266df164f8d9ab78c81aa64d911b4ff213428b00c8e679072303017717a38a1426bd0e3c6f745741b7a4a8979569943d7100c"}, 0xf8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r4, 0x0, 0x200000000102) 03:48:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f00000000c0)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 03:48:22 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x2, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000b2, 0x0) [ 387.789179] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:48:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000140)={0x0, 0x1, 0x0, [], &(0x7f0000000080)={0x98f905, 0xffffffff00000006, [], @p_u32=&(0x7f0000000100)=0xe7ffffffffffffff}}) [ 387.950884] IPVS: ftp: loaded support on port[0] = 21 [ 389.391008] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.397922] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.404777] device bridge_slave_0 entered promiscuous mode [ 389.535454] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.541798] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.548905] device bridge_slave_1 entered promiscuous mode [ 389.565721] device bridge_slave_1 left promiscuous mode [ 389.571203] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.636026] device bridge_slave_0 left promiscuous mode [ 389.641464] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.625669] team0 (unregistering): Port device team_slave_1 removed [ 391.635583] team0 (unregistering): Port device team_slave_0 removed [ 391.646205] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 391.700055] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 391.784067] bond0 (unregistering): Released all slaves [ 391.849510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 391.879329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 391.980451] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 392.026047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 392.226319] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 392.233627] team0: Port device team_slave_0 added [ 392.275674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 392.282969] team0: Port device team_slave_1 added [ 392.323701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 392.370461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 392.417529] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 392.424661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.441165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.477331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 392.484400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.500600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.932973] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.939400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.946107] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.952472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.960446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 393.915441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.970727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.056359] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 394.142016] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 394.148421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.155760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.235883] 8021q: adding VLAN 0 to HW filter on device team0 03:48:29 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000480)={@multicast2, @rand_addr}, &(0x7f0000000680)=0xc) 03:48:29 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000340)={0x8, 0x0, 0x80}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x3) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = memfd_create(&(0x7f0000000080)='/dev/media#\x00', 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @remote, 0x0}, &(0x7f00000001c0)=0xc) getpeername(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x2, r3, 0x3, r4}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x24d0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000140)='\x00', 0x7) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40086437, &(0x7f0000000300)={r6, 0xd8cd}) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000000)) 03:48:29 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05667, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000008000001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x10, @ipv4={[], [], @broadcast}, 0x4}}, 0x4, 0x1, 0x7f80000000000000, "99d77ce7fe469e978fede794f2a9a3628648ba999b14b0ec1d7e55f53705f30f636f1bd5c872f36261b67f8b30729d32ae70f155f243ee2493e0f499332208754cce64ed251bbe085952f8e2798131f5"}, 0xd8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0xef}, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x800455d1, &(0x7f0000000080)) 03:48:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000089, 0x0) 03:48:29 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000140)={0x0, 0x6, [], {0x0, @reserved}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:29 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:29 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:29 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 03:48:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000024, 0x0) 03:48:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000180)={0x5, 0x2, 0x4}) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x240) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x111, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000080)={0x39, 0x1f, 0x15, 0x11, 0x0, 0x1f, 0x6, 0x24, 0xffffffffffffffff}) 03:48:30 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x1013ff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) fstatfs(r1, &(0x7f0000000340)=""/7) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000780)="25000000070a07031dfffd946fa2830020209e0b32d480681102ba7f29676eb09229734a43f1f45f4aa0ba5851da23d819236d55e8ea9105b012d5f4c12367e2d297d7fba09c044c440600000000000000e11136d1fbfe2a97d272afc7df990ce95b2efc7cb47ac673", 0x69}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:30 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000109, 0x0) 03:48:30 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x5460, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)) 03:48:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000075, 0x0) 03:48:30 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x402c582a, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:30 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:30 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000c7, 0x0) 03:48:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000140)) r4 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000080)=0x10000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x101, 0x2000) 03:48:30 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x40045613, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:31 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r8, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:31 executing program 2: r0 = socket$packet(0x11, 0x2000000002, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) sched_getscheduler(r1) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x410002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) sendto$inet(r4, &(0x7f0000000140), 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r4, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1402000025000002000000000000ad766da3f292c76022b5000000000000b471dd67cd6a9f89fef60f8859fa827095"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@dev}}, {{}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getegid() sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="4047f0096aed1023d30a812cdeb5e8a06b90962e3af7b199b9e07994a91cf3a16868cb8b042c3dddaf3549d42c50eb2fec", 0x31}], 0x1, 0x0, 0x0, 0x4000}, 0x4008000) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 03:48:31 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x402001) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) write$binfmt_aout(r1, &(0x7f0000000140)={{0x1cf, 0x1f, 0x400, 0x1cd, 0x212, 0x0, 0x3be, 0x7}, "222a8b9aa3a81cb6da13204951004b703a66a64e3ef69c5cfa48d00687d9e4f08b2df297778c609c1c5058ff8ed0b765270d12afce90b0a18dc2e5ce7ea0c55c9ba56dc3680ffc2fe17ce5be1c3a48acaafa9106708aba1a8a713cfe7b87eb1a0615ce7f143b026a37e81ec658445e774750ea0a6c52a6116e261dbcb5fd62e9b0", [[], [], [], [], [], [], [], []]}, 0x8a1) socketpair(0x11, 0xe, 0xffffffff00000000, &(0x7f0000000080)) 03:48:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000010a, 0x0) 03:48:31 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000800)={0x8, 0x9, 0x1, 'queue0\x00', 0x4}) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r1) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000007c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:31 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc044560f, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:31 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000640)='/dev/usbmon#\x00', 0x6, 0x240) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f0000000340)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:31 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) fallocate(r0, 0x0, 0x0, 0x7) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000340)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000001c0)="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") getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000000c0)={@broadcast, @multicast2}, &(0x7f0000000140)=0x8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x9, 0x480000) ioctl$RTC_WIE_OFF(r5, 0x7010) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x200, 0x0) r6 = syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000002c0)=0x1) write$P9_RFLUSH(r5, &(0x7f0000000300)={0x7, 0x6d, 0x1}, 0x7) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000000)) 03:48:31 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0189436, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000028, 0x0) 03:48:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="550000001e007f5300fe01b2a4a280930a06200000a8430891000000080008000a000000000000000000000000090c036041726a7735c789b06dca27c43ab8220000060cec4fab91d4000000000000000000000000", 0x55}], 0x1}, 0x0) 03:48:31 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0445611, &(0x7f0000000300)={0x8, @pix_mp}) [ 397.201104] IPVS: ftp: loaded support on port[0] = 21 03:48:31 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x14, 0x80f, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) openat$cgroup_ro(r5, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0)=r5, 0x5cc3cae1) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000780)) getgroups(0x0, &(0x7f0000000480)) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000002b, 0x0) 03:48:31 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0205649, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4138ae84, &(0x7f0000000180)) [ 397.687322] netlink: 49 bytes leftover after parsing attributes in process `syz-executor2'. [ 398.844228] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.850713] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.857870] device bridge_slave_0 entered promiscuous mode [ 398.994423] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.000881] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.007955] device bridge_slave_1 entered promiscuous mode [ 399.025708] device bridge_slave_1 left promiscuous mode [ 399.031230] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.087059] device bridge_slave_0 left promiscuous mode [ 399.092470] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.088202] team0 (unregistering): Port device team_slave_1 removed [ 401.098456] team0 (unregistering): Port device team_slave_0 removed [ 401.108626] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 401.159914] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 401.214078] bond0 (unregistering): Released all slaves [ 401.300771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 401.329726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 401.404139] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 401.439324] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 401.636705] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 401.644025] team0: Port device team_slave_0 added [ 401.685943] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 401.693241] team0: Port device team_slave_1 added [ 401.734191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.779515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.824991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 401.832695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.848586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.884496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 401.892574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.909067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.341590] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.348220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.354865] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.361262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.369390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 403.355493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.412693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.500133] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 403.583464] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 403.589628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.597095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.681951] 8021q: adding VLAN 0 to HW filter on device team0 03:48:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x306}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000780)=""/153, 0xffffffffffffffd8, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000011a, 0x0) 03:48:39 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0185648, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000080)=""/30, &(0x7f00000000c0)=0x1e) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:39 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80d, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x9, 0x0, 0x200000000000}) r3 = socket$inet(0x10, 0x3, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) perf_event_open(&(0x7f0000000780)={0x3, 0x70, 0x3, 0x1000, 0x4, 0x9, 0x0, 0x6, 0x2, 0xb, 0x100, 0x5, 0x9, 0x400, 0x3, 0x9, 0x0, 0x40, 0x3ff, 0x6d, 0x9, 0x7f, 0x100000000, 0x6, 0x40, 0x7843, 0x6, 0x6, 0x1, 0xf93, 0x401, 0x4133, 0x1, 0x1d70000, 0x7, 0xffffffffffffffff, 0x5, 0x7f, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x1, 0x9, 0x6, 0xf, 0x3f, 0x3, 0x33}, r7, 0x9, r2, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="550000001e007f5300fe01b2a4a280930a06200000a8430891000000080008000a000000000000000000000000090c036041726a7735c789b06dca27c43ab8220000060cec4fab91d4000000000000000000000000", 0x55}], 0x1}, 0x0) [ 405.217539] netlink: 49 bytes leftover after parsing attributes in process `syz-executor2'. 03:48:39 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x8000000000005, 0x200000) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:39 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x5452, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:48:39 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x81a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0x9, @mcast2, 0xffffffffffffffff}, {0xa, 0x4e20, 0x81, @empty, 0xfff}, 0x3f, [0x80000000, 0x1, 0x3, 0x6, 0x1, 0x6b, 0xfff, 0x7796]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7f, 0x12400) ioctl$KDSKBLED(r4, 0x4b65, 0x9) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x9, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) r5 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)={0x0, 0x7fffffff, 0x7fff, &(0x7f0000000200)=0x400}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @mss={0x2, 0xfff}], 0x3) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f00000001c0)=0x4020) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x200, 0x200) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000000)) 03:48:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x3, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x80000000, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0x4) 03:48:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000f8, 0x0) 03:48:40 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x7) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r2, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000800)=0x280) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:40 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc04c561a, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:40 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") unshare(0x8000400) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)=@ethtool_ts_info={0x41, 0x0, 0x0, 0x0, [0x0, 0x7fffffff]}}) 03:48:40 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x8004562e, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x6781b6b3) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r7 = dup2(r5, r5) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) 03:48:40 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd5c0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x80f, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r3, 0x9) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:40 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc020660b, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:40 executing program 2: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x2) clone(0x1ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) clock_gettime(0x0, &(0x7f00000001c0)) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) 03:48:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x202) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000008d, 0x0) 03:48:40 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x4020940d, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x7}) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000009b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 03:48:40 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc004562f, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="c4c3f55f848c00800000f80f009b0100000066b875008ed00f001d00400000660ffefb2e0f01cb67660fe65200640f329a0a000000be000f0b", 0x39}], 0x1, 0xa, &(0x7f0000000140)=[@dstype3={0x7, 0x1}], 0x1) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:40 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000340)=0xc) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000043, 0x0) 03:48:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}, {r0, 0x400}, {r0, 0x1}], 0x3, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000003c0)=[@clear_death], 0x0, 0x0, 0x0}) 03:48:41 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0245628, &(0x7f0000000300)={0x8, @pix_mp}) [ 406.494726] binder: 20244:20245 Acquire 1 refcount change on invalid ref 0 ret -22 03:48:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x407ffff, 0x2f5f) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0xd, &(0x7f0000000340)=0x80000000, 0xfffffffffffffef3) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(r7, r7, 0x6, r0, r2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080), 0x12) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r10, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) [ 406.553300] binder: 20244:20245 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 406.591972] binder: 20244:20245 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:48:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000011e, 0x0) 03:48:41 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0405619, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x14, 0xfffffffffffffffe, 0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, "42c7ca4f"}, 0xee, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000480)=r4, 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f00000005c0)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000007c0)='/dev/usbmon#\x00', 0x6, 0x400) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000b00)={0x2, 0x7fffffff, 0x6, 'queue1\x00', 0x8000}) getrandom(&(0x7f0000000680)=""/153, 0x242, 0x4000000006) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 406.647102] binder: 20244:20259 Acquire 1 refcount change on invalid ref 0 ret -22 [ 406.717229] binder: 20244:20245 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:48:41 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x40049409, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:41 executing program 2: clone(0x2002001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2007ff) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 03:48:41 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0485619, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$inet6(0xa, 0x4, 0x4, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000100)='/dev/media#\x00', 0x0) syz_open_dev$media(0x0, 0xe0f6, 0xfffffffffeffffff) prctl$PR_SET_PDEATHSIG(0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000000)) 03:48:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = socket$inet6(0xa, 0x803, 0x8) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x4000000000000008) 03:48:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000072, 0x0) 03:48:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) pipe2(&(0x7f0000000340), 0x80000) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:41 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r0, &(0x7f0000000480), 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:41 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x8030560a, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000021f0000000020", 0x1012}) 03:48:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000079, 0x0) 03:48:41 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x402c5828, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x16) 03:48:42 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0585611, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000b7, 0x0) 03:48:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x7ff, 0x4) select(0x40, &(0x7f00000001c0)={0x1fc, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r6, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20004000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x53d1342100000000, 0x1802000000000000]}, 0x10) shutdown(r6, 0x1) r7 = dup2(r5, r5) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x3) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 03:48:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:48:43 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc044565d, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000780)={0x200004, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0x99, 0x3) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000087, 0x0) 03:48:43 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x8a, 0x7) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:43 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x80885659, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:43 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffffe93f, 0x800000000) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000340)=0xc) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x80f, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r7 = dup2(r6, r1) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000d0, 0x0) 03:48:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) 03:48:47 executing program 0: gettid() timer_create(0x0, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r0, &(0x7f0000000080)=""/128, 0x88308aa) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000001c0)) 03:48:47 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x0, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x1}) r4 = socket$inet(0x10, 0x80000000, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) dup2(r6, r6) readv(r0, &(0x7f0000000880)=[{&(0x7f00000008c0), 0xfffffffffffffd1a}], 0x0) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) sync_file_range(r1, 0x8, 0x2, 0x2) kcmp(0x0, r7, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000000680)={0x0, 0xfffffffffffffea2, &(0x7f0000000340)=[{&(0x7f0000000000)="24000004070a07031dfffd946fa283002024", 0x12}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:47 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x8ad8, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:47 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc058565d, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:47 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc058560f, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:47 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x50000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x80000000000008, 0x5}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffffffffffffffe0, 0x7fffffff, 0x6d2d, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:47 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0x242) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x4000000200) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r9, 0x10d, 0xc2, &(0x7f0000000040), &(0x7f0000000100)=0x4) 03:48:47 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0445609, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:47 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0185647, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000005b, 0x0) 03:48:47 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2000, 0x400000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x80, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0xc9, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x3, &(0x7f0000000340)=[r8, r8, r8]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:47 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0045627, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:49 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 03:48:49 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) dup3(r1, r3, 0x0) dup2(r2, r4) 03:48:49 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000480)=0xffffff1f) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000125, 0x0) 03:48:49 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000001d80)=[{&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/249, 0xf9}, {&(0x7f0000000940)=""/124, 0x7c}, {&(0x7f00000009c0)=""/183, 0xb7}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000b80)=""/124, 0x7c}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/4096, 0xfffffffffffffcdd}, {&(0x7f0000001c80)=""/219, 0xdb}], 0xa) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:49 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x802c560a, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:49 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x541b, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:49 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x80804, 0x7) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r2, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 414.684021] audit: type=1326 audit(1543031329.210:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20489 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f66a29 code=0xffff0000 03:48:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 03:48:49 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d056bf, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:49 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x90800, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000013d, 0x0) 03:48:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)=' \x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r1, &(0x7f00000000c0)) 03:48:49 executing program 2: pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r0, r2, 0x0) dup2(r1, r3) 03:48:49 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x402c560b, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:49 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0), 0x0, 0x0, 0x617d}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:49 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(r7, r7, 0x1, r3, r5) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000144, 0x0) 03:48:50 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0205647, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6c6f004000000000000500", 0x101}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @remote, @remote}, 0xc) 03:48:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000340)) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f00000006c0)={0x9, 0x2, 0xffff, 'queue0\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 415.675483] device lo entered promiscuous mode 03:48:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x27) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:50 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5605, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) pwritev(r0, &(0x7f00000011c0)=[{&(0x7f0000000080)="601c7cf3", 0x4}], 0x1, 0x0) 03:48:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts={0x0, 0xd, [], [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x5, 0x8, 0x7fff, 0xffffffffffffff35, [0x0, 0x2, 0xffffffff, 0xfffffffffffffff9]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}, 0x70) sendto$inet6(r0, &(0x7f0000000440), 0x0, 0x20000007, 0x0, 0x0) 03:48:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000061, 0x0) 03:48:50 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x80785659, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x14, 0x0, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x22400) dup3(r1, r3, 0x0) dup2(r2, r4) 03:48:50 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[]}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x2a, 0xaff, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:48:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000053, 0x0) 03:48:50 executing program 0: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x4, 0x4, 0x8, 0x0, 0x0, 0x0, [0x13]}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpid() sched_getscheduler(0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4080) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:48:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000d3, 0x0) 03:48:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x4000000004014, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x31da, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x4, 0x400000000000, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x1, 0x0, @offset=0x2d54325c, 0xfffffffffffffe00}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x8, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:50 executing program 2: creat(0x0, 0x0) io_setup(0x0, 0x0) io_setup(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe", 0x1e}], 0x1) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) 03:48:50 executing program 0: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r0) syz_execute_func(&(0x7f00000006c0)="3666950fdbf564ff0941c3c4e2c9975842c4c27d794e3366420fe2e33e0f1110c442019dcc6765da6fc56f") 03:48:51 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffada) prctl$PR_GET_TIMERSLACK(0x1e) [ 416.472657] device lo left promiscuous mode 03:48:51 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0585609, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000eb, 0x0) 03:48:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', "737978310000000000000000000000000000000200000057310f00000000000000000000000000170000220000000000000000000000000000000000001400", 'syz0\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x120) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000280)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) 03:48:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x0, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x5013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r1, r0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000780)=""/148, 0xffffffffffffffc9}], 0x2d4) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfe98) 03:48:51 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0f8565c, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:51 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0x5421, &(0x7f0000000300)={0x8, @pix_mp}) 03:48:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x3f, 0x100002000000) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) [ 417.532848] device lo entered promiscuous mode [ 417.822379] device lo left promiscuous mode 03:48:52 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x4, @pix_mp}) 03:48:52 executing program 0: socketpair$unix(0x1, 0x40000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="01006500"], 0x1}}, 0x0) 03:48:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000123, 0x0) 03:48:52 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x0, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400, 0x0}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r7 = dup2(r6, r6) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r10 = fcntl$getown(r7, 0x9) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r10, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f00000008c0)='fuseblk\x00', 0x40001000030, &(0x7f0000000b00)=ANY=[@ANYRES16=r4, @ANYRES64=r5, @ANYRES64=r10, @ANYRESOCT=r10, @ANYRES32=r4, @ANYRESHEX=r9, @ANYBLOB="2d7638c0109904bae0c7ba096010eaf81157888381228590b70c58f2019c34b9ec991c45b594bb56e8b3700287af01a598d8cdcd053bd30ff99915f0b1b16241bc0b55a5a9d6286e687f65ba89226866a80fac6decfac044d8b718e89582ac17eb3a62df8e8af1775bb6d2808f47f1c461af147bbee7822e4be92b0867b1", @ANYRESOCT=r8]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r11 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r11, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:52 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b3c000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x80f, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r7 = dup2(r6, r6) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(r8, r8, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6c6f004000000000000500", 0x101}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @remote}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @remote, @remote}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={"6c6f000400000000004a6b00"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/stat\x00') perf_event_open(0x0, 0x0, 0x0, r1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x100000001, {{0x2, 0x0, @multicast2}}}, 0x88) [ 418.199345] device lo entered promiscuous mode 03:48:52 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0xd, @pix_mp}) [ 418.224079] device lo left promiscuous mode 03:48:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) 03:48:52 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x2, @pix_mp}) [ 418.397524] IPVS: ftp: loaded support on port[0] = 21 03:48:52 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 03:48:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000004a, 0x0) 03:48:53 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x3, @pix_mp}) 03:48:53 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x240000) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000680), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000c8, 0x0) 03:48:53 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x9, @pix_mp}) 03:48:53 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0xa, @pix_mp}) [ 419.024693] device lo entered promiscuous mode [ 419.033894] device lo left promiscuous mode [ 419.595815] device bridge_slave_1 left promiscuous mode [ 419.601334] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.656565] device bridge_slave_0 left promiscuous mode [ 419.662044] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.755983] team0 (unregistering): Port device team_slave_1 removed [ 419.765779] team0 (unregistering): Port device team_slave_0 removed [ 419.776779] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 419.838738] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 419.893792] bond0 (unregistering): Released all slaves [ 420.002215] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.008694] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.015829] device bridge_slave_0 entered promiscuous mode [ 420.041999] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.048466] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.056394] device bridge_slave_1 entered promiscuous mode [ 420.098758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 420.142017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 420.268669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 420.312249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 420.515728] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 420.523141] team0: Port device team_slave_0 added [ 420.567332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 420.574640] team0: Port device team_slave_1 added [ 420.614883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 420.621873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 420.638183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 420.674780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 420.681687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 420.698067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 420.735116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 420.742313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.753612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.789862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 420.797556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.808743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.184291] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.190657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.197317] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.203674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.211044] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 421.595505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.172168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.260193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 422.352208] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 422.358379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.365713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.448025] 8021q: adding VLAN 0 to HW filter on device team0 03:48:57 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x9, 0xa, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000480)=r2, 0x0) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:57 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x0, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x1000000000000007, 0x8}, &(0x7f0000000200)={0x0, 0x2, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0x1b5}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x3f, 0x80004) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x40000000000000, 0x0, 0x0, 0x200, 0x3ff, "42c7ca4f"}, 0x0, 0x0, @fd, 0xfffffd47}) r6 = fcntl$getown(r2, 0x9) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x1) 03:48:57 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x5, @pix_mp}) 03:48:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2000000000015, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x5) socketpair$packet(0x11, 0x3, 0x300, 0x0) 03:48:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000110, 0x0) 03:48:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b707000001001000487000002cb7e07775180000000000009500000200000000"], 0x0}, 0x48) 03:48:57 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0xc, @pix_mp}) 03:48:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_execute_func(&(0x7f0000000500)="3666440f50f564ff0941c3c4e2c9975842c4c27d790066420fe2e33e0f1110c442019dc1cccc196f") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="b5f34a6cb99c995a7a060000003d074de30444be818804e54f6c4be371d31d10d779a3fcd6b8f89c89888ec153d32967", 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x20) 03:48:57 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0xa56, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x7, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f0000000340)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000fec000/0x14000)=nil, 0x13000}, &(0x7f0000000800)=0x12) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0x16, 0x0, 0x0) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, &(0x7f0000000380)) 03:48:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000300)='gre0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) socketpair$inet6(0xa, 0x0, 0x0, 0x0) 03:48:57 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0xb, @pix_mp}) 03:48:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000f9, 0x0) 03:48:58 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x6, @pix_mp}) 03:48:58 executing program 0: ustat(0x800000000000e, &(0x7f0000000080)) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0x18}, 0xfed2) 03:48:58 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000340)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:58 executing program 0: mq_open(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)) 03:48:58 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x7, @pix_mp}) 03:48:58 executing program 0: 03:48:58 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x100000000000000}}) 03:48:58 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @offset, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000680), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) 03:48:59 executing program 2: 03:48:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000012a, 0x0) 03:48:59 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x1000000}}) 03:48:59 executing program 0: 03:48:59 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1003ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:48:59 executing program 0: r0 = socket$packet(0x11, 0x2000000002, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) sched_getscheduler(r1) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x410002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) sendto$inet(r5, &(0x7f0000000140), 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@dev}}, {{}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getegid() sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="4047f0096aed1023d30a812cdeb5e8a06b90962e3af7b199b9e07994a91cf3a16868cb8b042c3dddaf3549d42c50eb2fec", 0x31}], 0x1, 0x0, 0x0, 0x4000}, 0x4008000) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 03:49:01 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1, 0x0, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000038000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x20000010000) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r7 = dup2(r6, r6) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) 03:49:01 executing program 0: r0 = socket$packet(0x11, 0x2000000002, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) sched_getscheduler(r1) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x410002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) sendto$inet(r5, &(0x7f0000000140), 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@dev}}, {{}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getegid() sendmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="4047f0096aed1023d30a812cdeb5e8a06b90962e3af7b199b9e07994a91cf3a16868cb8b042c3dddaf3549d42c50eb2fec", 0x31}], 0x1, 0x0, 0x0, 0x4000}, 0x4008000) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 03:49:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:49:01 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x2000000}}) 03:49:01 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000340)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r1) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0) 03:49:01 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x80000}}) 03:49:01 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000044a6ae01012e0200170000000014150800ec00200000b8188e23061291cdaf72dd9a000092c6531e60c0"], 0x2e) 03:49:01 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x8}}) 03:49:01 executing program 0: 03:49:01 executing program 0: [ 427.546261] IPVS: ftp: loaded support on port[0] = 21 [ 429.051593] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.058075] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.064990] device bridge_slave_0 entered promiscuous mode [ 429.075996] device bridge_slave_1 left promiscuous mode [ 429.081504] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.135848] device bridge_slave_0 left promiscuous mode [ 429.141279] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.147142] team0 (unregistering): Port device team_slave_1 removed [ 431.157496] team0 (unregistering): Port device team_slave_0 removed [ 431.167673] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 431.209561] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 431.273697] bond0 (unregistering): Released all slaves [ 431.349614] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.356392] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.363341] device bridge_slave_1 entered promiscuous mode [ 431.393802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 431.419980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 431.494444] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 431.542723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 431.740790] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 431.748485] team0: Port device team_slave_0 added [ 431.788277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 431.796025] team0: Port device team_slave_1 added [ 431.836696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.881854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.925016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 431.932576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.948585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.986122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 431.993208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.009259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.440928] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.447366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.454048] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.460489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.468277] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 433.435425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.511275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.596999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 433.680159] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 433.686463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.693458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.778860] 8021q: adding VLAN 0 to HW filter on device team0 03:49:08 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x1) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:08 executing program 2: 03:49:08 executing program 0: 03:49:08 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x80f, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r1) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:08 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x2}}) 03:49:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000fc, 0x0) 03:49:08 executing program 0: 03:49:09 executing program 0: 03:49:09 executing program 0: 03:49:09 executing program 2: 03:49:09 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x200000000000000}}) 03:49:09 executing program 0: 03:49:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000bd, 0x0) 03:49:09 executing program 2: 03:49:09 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f0000000300)=0x67, 0xffffffffffffff9c) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:09 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x8000000000000}}) 03:49:09 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000800)='/dev/dmmidi#\x00', 0x9, 0x20000) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0)=r2, 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:09 executing program 0: 03:49:09 executing program 0: 03:49:09 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x1000000}}) 03:49:09 executing program 2: 03:49:09 executing program 0: 03:49:09 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x2000000}}) 03:49:09 executing program 2: 03:49:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000003e, 0x0) 03:49:09 executing program 0: 03:49:09 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x7) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:09 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x8}}) 03:49:09 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x0, 0x0) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r5 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r5, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:10 executing program 0: 03:49:10 executing program 2: 03:49:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000126, 0x0) 03:49:10 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x2}}) 03:49:10 executing program 0: 03:49:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:10 executing program 2: 03:49:10 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x200000000000000}}) 03:49:10 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0xffffffffffffffd6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:10 executing program 0: 03:49:10 executing program 2: 03:49:10 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x8000000000000}}) 03:49:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0xff50) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:10 executing program 0: 03:49:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000000e, 0x0) 03:49:10 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:10 executing program 2: 03:49:10 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x100000000000000}}) 03:49:10 executing program 0: 03:49:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000fa, 0x0) 03:49:10 executing program 2: 03:49:10 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x80000}}) 03:49:10 executing program 2: 03:49:10 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x9, 0x80802, 0x3ffe) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) dup2(r5, r5) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000840)=""/173, 0xad}], 0x1) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) r9 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r9, r10) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x2, &(0x7f0000000480)=[r7, r7]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:11 executing program 0: 03:49:11 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x80000}}) 03:49:11 executing program 2: 03:49:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000059, 0x0) 03:49:11 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x1000000}}) 03:49:11 executing program 0: 03:49:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x0, 0x0, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1) shutdown(r0, 0x0) socketpair$inet6(0xa, 0x0, 0x0, 0x0) 03:49:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000016, 0x0) 03:49:11 executing program 2: 03:49:11 executing program 0: 03:49:11 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x200, &(0x7f0000000300)=0x4, 0x7d) select(0x40, &(0x7f00000001c0)={0x203, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:11 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x8}}) 03:49:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000008a, 0x0) 03:49:11 executing program 0: 03:49:11 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x400c920a, 0x815fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:11 executing program 2: 03:49:11 executing program 2: 03:49:11 executing program 0: 03:49:11 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x2}}) 03:49:11 executing program 2: 03:49:11 executing program 0: 03:49:11 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x100000000000000}}) 03:49:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x80f, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400, 0x0}) r7 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r8 = dup2(r7, r7) readv(r8, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r10 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r10, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000780)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRESHEX=r9, @ANYRES64=r5, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYRESHEX=r1, @ANYRES16=r5, @ANYRES64=r6, @ANYRESHEX=r2, @ANYRES16=r2], @ANYRES32=r11], @ANYRES16=r6]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r12 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r12, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 03:49:12 executing program 2: 03:49:12 executing program 0: 03:49:12 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:12 executing program 2: 03:49:12 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x200000000000000}}) 03:49:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000096, 0x0) 03:49:12 executing program 0: 03:49:12 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x8000000000000}}) 03:49:12 executing program 2: 03:49:12 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:12 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x80f, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r7 = dup2(r6, r6) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000480)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000600)='fuseblk\x00', 0x800, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:12 executing program 0: 03:49:12 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x2000000}}) 03:49:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000c2, 0x0) 03:49:12 executing program 2: 03:49:12 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000005c0)=r4, 0x5437f7893ff4b877) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:12 executing program 2: 03:49:12 executing program 0: 03:49:12 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x100000000000000}}) 03:49:12 executing program 2: 03:49:12 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(r7, r7, 0x0, r1, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:12 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000180)=0x4, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0x0, 0x20000000, 0x0, 0x0) 03:49:12 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r1, 0x0, 0x0) 03:49:12 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x200000000000000}}) 03:49:12 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000340)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f0000000480)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000500)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r8, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000f4, 0x0) 03:49:12 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) [ 438.373531] ptrace attach of "/root/syz-executor2"[15502] was attempted by "/root/syz-executor2"[21737] 03:49:13 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x8000000000000}}) [ 438.457597] ptrace attach of "/root/syz-executor2"[15502] was attempted by "/root/syz-executor2"[21737] 03:49:13 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:49:13 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0x1f}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) syz_open_pts(r6, 0x1) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) clone(0x4100, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x4000000000000173, &(0x7f0000000480)=[r8]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x80f, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0xfffffffffffffffe, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r1, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd=0xffffffffffffffff, 0x4}) r8 = fcntl$getown(r7, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0xfffffec4) kcmp(0x0, r8, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x400c920a, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000005c0)=r4, 0x5437f7893ff4b877) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x1000000}}) 03:49:13 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x80f, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r7 = dup2(r6, r6) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000480)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000600)='fuseblk\x00', 0x800, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000002, 0x0) 03:49:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4002) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x0, 0xffffbffffffffffd) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000400)='fuseblk\x00', 0x2000, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getgroups(0x40000000000000ad, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(r7, r7, 0x0, r1, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x204, &(0x7f0000000480)) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x2000000}}) 03:49:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000aa, 0x0) 03:49:13 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x80000}}) 03:49:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x80000000000812, 0x3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x7) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x8}}) 03:49:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0xe385c0649cb885b3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x1) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1, 0x0, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000038000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x20000010000) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r7 = dup2(r6, r6) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) 03:49:13 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x2}}) 03:49:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000013, 0x0) 03:49:13 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x14, 0x0, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000780)=r5, 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x1000, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:13 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x80f, 0x4004) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000500)={0x8}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r1, 0x9) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r6, 0x0, r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x400c920a, 0x49) ioctl$UI_DEV_CREATE(r3, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000780)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000012}) getrandom(&(0x7f0000000680)=""/153, 0x99, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x1) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x200000000000000}}) 03:49:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000000d1, 0x0) 03:49:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x240000) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000680), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8c5f}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x8000000000000}}) 03:49:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x80000}}) 03:49:14 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x14, 0x0, 0x4004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x5013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000500)={0x8}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000100)) r5 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r1, r0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000780)=""/148, 0xffffffffffffffc9}], 0x2d4) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfe98) 03:49:14 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1000000}}) 03:49:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x3, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x4, 0x400000000000, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x1, 0x0, @offset=0x2d54325c, 0xfffffffffffffe00}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x8, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000159, 0x0) 03:49:14 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x0, 0x400000000) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x80d, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:14 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2000000}}) 03:49:14 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x800, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000340)=0xfffffeac) 03:49:15 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0), 0x0, 0x0, 0x617d}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000013f, 0x0) 03:49:15 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x8}}) 03:49:15 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2}}) 03:49:15 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x2, 0x7, 0x9, 0xfffffffffffffffc, 0x10000}, &(0x7f0000000240)={0x10001, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r5 = dup2(r4, r4) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r6 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) gettid() kcmp(r6, r6, 0x0, r5, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r1, 0x0, 0x400000000001d, &(0x7f0000000480)={@multicast2, @rand_addr}, &(0x7f0000000340)=0xc) 03:49:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000001d80)=[{&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/249, 0xf9}, {&(0x7f0000000940)=""/124, 0x7c}, {&(0x7f00000009c0)=""/183, 0xb7}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000b80)=""/124, 0x7c}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/4096, 0xfffffffffffffcdd}, {&(0x7f0000001c80)=""/219, 0xdb}], 0xa) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000002a, 0x0) 03:49:15 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x100000000000000}}) 03:49:15 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x80000}]}}) 03:49:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000136, 0x0) 03:49:16 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x0, 0x8}}, 0x20) 03:49:17 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x1000000}]}}) 03:49:17 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0), 0x0, 0x0, 0x617d}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000021, 0x0) 03:49:17 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x0, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x800000000, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) openat$cgroup_type(r4, &(0x7f0000000340)='cgroup.type\x00', 0x2, 0x0) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000005, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) r6 = dup2(r5, r5) readv(r6, &(0x7f0000001d80)=[{&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000840)=""/249, 0xf9}, {&(0x7f0000000940)=""/124, 0x7c}, {&(0x7f00000009c0)=""/183, 0xb7}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000b80)=""/124, 0x7c}, {&(0x7f0000000c00)=""/66, 0x42}, {&(0x7f0000000c80)=""/4096, 0xfffffffffffffcdd}, {&(0x7f0000001c80)=""/219, 0xdb}], 0xa) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r7 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r7, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) getgroups(0x1, &(0x7f0000000180)=[0x0]) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2, @rand_addr}, &(0x7f0000000a80)=0xfffffffffffffeb4) 03:49:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x80f, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x1013ff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000500)={0x8}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000100)) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000000000001, 0x2000200001ffd) setsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f0000000300)=0x67, 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x7, 0x86bc, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r7 = dup2(r5, r5) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "42c7ca4f"}, 0x0, 0x0, @fd, 0x4}) r8 = fcntl$getown(r0, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000005c0), 0x4) kcmp(0x0, r8, 0x0, r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000002c0)=0xffffffffffffff56) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000180)=ANY=[]) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283002020", 0x12}], 0x1}, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x20002104, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0x400c920a, 0x814fffd) ioctl$UI_DEV_CREATE(r4, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0x4, 0x7fffffff, 0x9, 'queue1\x00', 0x800000000002}) [ 442.792354] ================================================================== [ 442.799996] BUG: KASAN: global-out-of-bounds in tpg_print_str_4+0xbc9/0xd70 [ 442.807105] Read of size 1 at addr ffffffff88632c50 by task vivid-000-vid-c/21978 [ 442.814713] [ 442.816338] CPU: 1 PID: 21978 Comm: vivid-000-vid-c Not tainted 4.20.0-rc3+ #249 [ 442.823865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.833249] Call Trace: [ 442.835856] dump_stack+0x244/0x39d [ 442.839488] ? dump_stack_print_info.cold.1+0x20/0x20 [ 442.844679] ? printk+0xa7/0xcf [ 442.847964] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 442.852726] ? enable_ptr_key_workfn+0x30/0x30 [ 442.857331] print_address_description.cold.7+0x58/0x1ff [ 442.857351] kasan_report.cold.8+0x242/0x309 [ 442.857363] ? tpg_print_str_4+0xbc9/0xd70 [ 442.857380] __asan_report_load1_noabort+0x14/0x20 [ 442.857395] tpg_print_str_4+0xbc9/0xd70 [ 442.880445] ? vscnprintf+0x70/0x80 [ 442.884099] tpg_gen_text+0x4ba/0x540 [ 442.887945] vivid_fillbuff+0x3ff7/0x68e0 [ 442.892131] ? __mutex_lock+0x85e/0x16f0 [ 442.896211] ? vivid_thread_vid_cap+0x361/0x2650 [ 442.900994] ? mutex_trylock+0x2b0/0x2b0 [ 442.905071] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 442.909667] ? retint_kernel+0x2d/0x2d [ 442.913574] ? vivid_grab_controls+0x380/0x380 [ 442.918166] ? find_held_lock+0x36/0x1c0 [ 442.922262] ? find_held_lock+0x36/0x1c0 [ 442.926365] ? lock_downgrade+0x900/0x900 [ 442.930527] ? v4l2_ctrl_request_setup+0x477/0xad0 [ 442.935472] ? __refrigerator+0x420/0x420 [ 442.939643] vivid_thread_vid_cap+0xbc1/0x2650 [ 442.939657] ? vivid_thread_vid_cap+0xbc1/0x2650 [ 442.939674] ? zap_class+0x640/0x640 [ 442.949002] ? zap_class+0x640/0x640 [ 442.949016] ? find_held_lock+0x36/0x1c0 [ 442.949050] ? vivid_fillbuff+0x68e0/0x68e0 [ 442.949065] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 442.949080] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 442.975024] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 442.979612] ? trace_hardirqs_on+0xbd/0x310 [ 442.983943] ? kasan_check_read+0x11/0x20 [ 442.988095] ? __kthread_parkme+0xce/0x1a0 [ 442.992331] ? trace_hardirqs_off_caller+0x310/0x310 [ 442.997456] ? trace_hardirqs_off_caller+0x310/0x310 [ 443.002571] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 443.007680] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.013222] ? __kthread_parkme+0xfb/0x1a0 [ 443.017481] ? vivid_fillbuff+0x68e0/0x68e0 [ 443.021805] kthread+0x35a/0x440 [ 443.025187] ? kthread_stop+0x900/0x900 [ 443.029172] ret_from_fork+0x3a/0x50 [ 443.032889] [ 443.034548] The buggy address belongs to the variable: [ 443.039829] font_vga_8x16+0x50/0x60 03:49:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000035, 0x0) 03:49:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000012d, 0x0) [ 443.043528] [ 443.045149] Memory state around the buggy address: [ 443.050079] ffffffff88632b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.057463] ffffffff88632b80: 00 00 00 00 fa fa fa fa 00 fa fa fa fa fa fa fa [ 443.064821] >ffffffff88632c00: 00 00 00 00 00 fa fa fa fa fa fa fa 00 00 00 00 [ 443.071269] cgroup: fork rejected by pids controller in /syz1 [ 443.072178] ^ [ 443.072190] ffffffff88632c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.072200] ffffffff88632d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 443.072204] ================================================================== [ 443.072209] Disabling lock debugging due to kernel taint [ 443.093949] IPVS: ftp: loaded support on port[0] = 21 [ 443.099547] kobject: 'loop5' (00000000c7c8c35b): kobject_uevent_env [ 443.113478] Kernel panic - not syncing: panic_on_warn set ... [ 443.129295] CPU: 1 PID: 21978 Comm: vivid-000-vid-c Tainted: G B 4.20.0-rc3+ #249 [ 443.138212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.143544] kobject: 'loop5' (00000000c7c8c35b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 443.147570] Call Trace: [ 443.147589] dump_stack+0x244/0x39d [ 443.147605] ? dump_stack_print_info.cold.1+0x20/0x20 [ 443.147634] panic+0x2ad/0x55c [ 443.147648] ? add_taint.cold.5+0x16/0x16 [ 443.147680] ? preempt_schedule+0x4d/0x60 [ 443.179961] ? ___preempt_schedule+0x16/0x18 [ 443.184391] ? trace_hardirqs_on+0xb4/0x310 [ 443.188736] kasan_end_report+0x47/0x4f [ 443.192713] kasan_report.cold.8+0x76/0x309 [ 443.197052] ? tpg_print_str_4+0xbc9/0xd70 [ 443.201288] __asan_report_load1_noabort+0x14/0x20 [ 443.206219] tpg_print_str_4+0xbc9/0xd70 [ 443.210291] ? vscnprintf+0x70/0x80 [ 443.213926] tpg_gen_text+0x4ba/0x540 [ 443.217830] vivid_fillbuff+0x3ff7/0x68e0 [ 443.222022] ? __mutex_lock+0x85e/0x16f0 [ 443.226105] ? vivid_thread_vid_cap+0x361/0x2650 [ 443.230873] ? mutex_trylock+0x2b0/0x2b0 [ 443.231547] kobject: 'loop1' (00000000bfdf3d50): kobject_uevent_env 03:49:17 executing program 5: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0xa8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x8, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x2000000}]}}) 03:49:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200), 0x10, 0x0}, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000014, 0x0) [ 443.234935] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 443.234947] ? retint_kernel+0x2d/0x2d [ 443.234966] ? vivid_grab_controls+0x380/0x380 [ 443.254396] ? find_held_lock+0x36/0x1c0 [ 443.256123] kobject: 'loop1' (00000000bfdf3d50): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 443.258465] ? find_held_lock+0x36/0x1c0 [ 443.258487] ? lock_downgrade+0x900/0x900 [ 443.276176] ? v4l2_ctrl_request_setup+0x477/0xad0 [ 443.281114] ? __refrigerator+0x420/0x420 [ 443.285272] vivid_thread_vid_cap+0xbc1/0x2650 [ 443.289866] ? vivid_thread_vid_cap+0xbc1/0x2650 [ 443.294633] ? zap_class+0x640/0x640 [ 443.298387] ? zap_class+0x640/0x640 [ 443.302111] ? find_held_lock+0x36/0x1c0 [ 443.306188] ? vivid_fillbuff+0x68e0/0x68e0 [ 443.310507] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 443.315609] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 443.320730] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 443.325314] ? trace_hardirqs_on+0xbd/0x310 [ 443.329642] ? kasan_check_read+0x11/0x20 [ 443.333794] ? __kthread_parkme+0xce/0x1a0 [ 443.338044] ? trace_hardirqs_off_caller+0x310/0x310 [ 443.339169] IPVS: ftp: loaded support on port[0] = 21 [ 443.343165] ? trace_hardirqs_off_caller+0x310/0x310 [ 443.343183] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 443.343202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.364106] ? __kthread_parkme+0xfb/0x1a0 [ 443.368347] ? vivid_fillbuff+0x68e0/0x68e0 [ 443.372672] kthread+0x35a/0x440 [ 443.376042] ? kthread_stop+0x900/0x900 [ 443.380013] ret_from_fork+0x3a/0x50 [ 443.384786] Kernel Offset: disabled [ 443.388410] Rebooting in 86400 seconds..